Dokploy stores the composePath value without validation before version 0.29.13, allowing an attacker to embed arbitrary shell commands into Docker‑compose and stack deploy scripts that are executed by /bin/sh -c. An authenticated user who possesses compose write and deploy permissions can supply a crafted composePath, trigger the compose.deploy or startCompose actions, and execute arbitrary operating‑system commands in the Docker‑privileged Dokploy host environment. This flaw, classified as CWE‑78, provides the attacker with the ability to achieve full code execution and compromise the confidentiality, integrity and availability of the host system.

All installations of Dokploy earlier than version 0.29.13 are affected. The vulnerability exists in the compose.update operation within the server modules that construct Docker commands from the user supplied composePath. Any user with compose write and deploy rights on such an instance is at risk.

The CVSS score of 9.9 places this issue in the highest severity band, and the lack of an EPSS score indicates the data is not available, though the high CVSS indicates a serious risk. The vulnerability is not currently listed in the CISA KEV catalog. The attack requires an authenticated user with specific compose permissions, so limited access control is a prerequisite. Once those permissions are in place, the attacker can inject commands that are run with the privileges of the Dokploy host, which is typically Docker‑privileged, making exploitation potentially extremely damaging.