VULNERABILITY INTELLIGENCE

CVE-2026-45662

CVSS score8.8 HIGH
EPSS probability1.02%
CISA KEVNot currently listed
Published2026-05-29
Last modified2026-10-06
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.0 and earlier, the deleteRegistry function in Dokploy (packages/server/src/services/registry.ts) executes docker logout ${response.registryUrl} without shell escaping. In the same file, the docker login command correctly uses shEscape() to prevent command injection. This inconsistency creates a command injection vulnerability when deleting a registry with a crafted registryUrl.

Weakness classification

  • security-advisories@github.com: CWE-78

Primary references