Dokploy is a self‑hosted PaaS that, before version 0.29.13, built backup and restore commands by directly interpolating user‑controlled database values into shell strings executed via child_process.exec(). This creates an OS command injection flaw that an authenticated administrator or owner can exploit to run arbitrary shell commands on the host machine, bypassing container isolation. The vulnerability aligns with CWE-78, enabling the attacker to execute any command with the privileges of the Dokploy service process, potentially compromising the entire host system and all running containers.

Affected products include Dokploy versions earlier than 0.29.13. The issue exists in the backup and restore pipeline where database fields are unsanitized. The fix was released in Dokploy 0.29.13; any deployment using an earlier release is vulnerable.

The CVSS score of 9.6 indicates critical severity. The EPSS score is not available, suggesting no public exploit data yet, but the flaw remains highly actionable. Because the attacker must be an authenticated privileged user (admin/owner), the attack vector is internal. If such credentials are compromised or misused, the attacker can execute arbitrary OS commands on the host, leading to system compromise. The vulnerability is not listed in CISA KEV, but its impact is high.