CVE-2026-72740

creationtimestamp| type| source ---|---|--- 2026-08-10 18:38:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/aemh5cwnsrtqh 2026-08-10 19:24:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqta4hrup2b...

CVE-2026-72740 Dokploy: OS Command Injection via SSH-form `customGitUrl` domain in `ssh-keyscan`

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, packages/server/src/utils/providers/git.ts parses the user-controlled customGitUrl with sanitizeRepoPathSSH and interpolates its domain into the ssh-keyscan command from addHostToKnownHostsCommand without shell quoting...