Dokploy, a self‑hosted PaaS platform, allows execution of an rclone command built from user‑supplied destination configuration fields via child process execution. The command string is not properly escaped, enabling an attacker with member‑level permissions to craft a field that closes a quoted argument and injects arbitrary shell commands. This results in arbitrary code execution within the Dokploy container as root, granting access to the host Docker socket and effectively full control over the host system. The weakness corresponds to operating system command injection (CWE‑78) and missing authorization (CWE‑862).

Any installation of Dokploy prior to version 0.29.13 is affected. The identified vulnerability resides in the destination.testConnection mutation within the destination API router. The fix was released in the 0.29.13 release.

The CVSS score of 9.9 classifies the issue as critical, and although EPSS data is currently unavailable, the high exploitability is evident due to the low‑privilege member role required to trigger the injection. The vulnerability is not listed in the CISA KEV catalog. Attackers can perform the exploit remotely through the documented API endpoint, provided they possess the minimal create permission for destinations. The outcome enables full host compromise through the exposed Docker socket.