CVE-2026-116068 Dokploy through 0.30.10 Cross-Organization Authorization Bypass via Application tRPC Router

Dokploy through 0.30.10 contains an authorization bypass vulnerability that allows owners or admins of any organization to control other tenants' applications by supplying foreign applicationId values. Attackers can call procedures like saveEnvironment, updateTraefikConfig, deploy, or stop to...

CVE-2026-116068

Versions of Dokploy up to and including 0.30.10 are vulnerable to a cross-organization authorization bypass via the Application tRPC Router. The flaw allows owners or admins of one organization to control applications belonging to other tenants by providing foreign applicationId values . Exploita...