Dokploy, a self-hosted platform-as-a-service, contains an authorization bypass in the swarm API. Prior to version 0.29.13, the endpoints swarm.getNodes, swarm.getNodeInfo, swarm.getNodeApps, and swarm.getAppInfos accept another organization's serverId without validating ownership. The getNodeInfo handler then interpolates the nodeId into a remote execution call, allowing any user with server:read permission to run arbitrary commands as the configured SSH user on a different tenant’s server. This flaw provides an attacker with full remote code execution capability on a victim’s host.

The affected product is Dokploy platform, specifically any installation running a version earlier than 0.29.13. The vendor released a fix in the 0.29.13 release that adds explicit ownership checks to the swarm endpoints and sanitizes execution input. All versions prior to 0.29.13 are vulnerable.

With a CVSS score of 9.9, this issue is classified as critical. No EPSS score is currently available, and the vulnerability is not listed in the CISA KEV catalog, but the lack of exploitation data does not diminish the inherent risk of remote code execution over the network. Attackers who can access the Dokploy API with server:read privileges can exploit the IDOR to trigger arbitrary commands on a different tenant’s server, potentially leading to full system compromise.