An authenticated user with backup:restore permission can craft a databaseName value that is passed directly into shell commands executed by Node.js exec within Dokploy's backup restoration process. This causes the host’s shell to expand the value before a Docker exec call, allowing arbitrary commands to run with host privileges. The flaw is an OS command injection leading to full host compromise.

The vulnerability exists in the Dokploy Platform as a Service platform, primarily in all releases prior to 0.29.13. Users running self-hosted Dokploy deployments that have enabled the backup.restoreBackupWithLogs RPC endpoint and granted backup:restore authority to any account are susceptible.

With a CVSS score of 9.9, the bug is rated critical. EPSS data is not provided, but the lack of a KEV listing suggests it may not yet be widely exploited, yet the impact of host RCE warrants immediate attention. The exploit requires no special network access beyond the standard authenticated session, making the attack vector internal but easily achievable for legitimate users with backup rights or compromised accounts.