Dokploy, a self‑hosted PaaS, allowed an authenticated user with project access to inject arbitrary shell commands by manipulating the dockerImage field. The buildRemoteDocker() function concatenated the supplied image name directly into a docker pull command, and execAsync() executed that string as a shell command. Consequently, the attacker could run any operating‑system commands as the Dokploy server process, leading to potential full system compromise. This is a command injection flaw (CWE‑78).

All Dokploy installations running versions prior to 0.29.13 are affected. The vulnerability exists in the server component packages/server/src/utils/providers/docker.ts. Any deployment that accepts user‑supplied dockerImage values through the API or web interface and has project‑level permissions is vulnerable. The advice is to ensure the application is upgraded to 0.29.13 or newer.

The CVSS score of 8.7 indicates high severity. No EPSS data is available, so the exploitation probability is unknown; the flaw is not listed in CISA KEV, implying no publicly known exploits yet. The attack requires an authenticated user with project access, so the likelihood depends on how many users have such permissions. Once exploited, the attacker gains full control over the Dokploy host by executing arbitrary OS commands. The fix is an outright update; in its absence, a workaround is to disable project access to update dockerImage or restrict deploy rights.