CVE-2026-128329 · Other
NO FIX YET · SEE WHAT TO DO
Dokploy versions 0.28.0 before 0.31.1 let authenticated organization members read arbitrary files by supplying ../ sequences in the filePath of patch.readRepoFile. An attacker with service read permission can read files such as /etc/shadow, SSH private keys and secret environment files on the Dokploy host or managed remote servers.
first public Nov 12, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Teams that self-host Dokploy between versions 0.28.0 and 0.31.1 and have organization members with service read permission. Per the sources, the flaw is reached through patch.readRepoFile, and it exposes files on the Dokploy host and on managed remote servers. Instances already on 0.31.1 or later are not affected.
Not affected if version-0.31.1-or-later
Who cares dokploy, self-hosted, ssh
0.28.0 up to but not including 0.31.1.0.31.1 or later.Dokploy 0.28.0 before 0.31.1 contains a path traversal vulnerability that allows authenticated organization members to read arbitrary files by supplying ../ sequences in the filePath of patch.readRepoFile. Attackers with service read permission can read /etc/shadow, SSH private keys, and secret environment files on the Dokploy host or managed remote servers.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.