CVE-2026-72901

creationtimestamp| type| source ---|---|--- 2026-08-10 20:34:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqx5ag3x72r 2026-08-10 21:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msqyn7cqox2w...

CVE-2026-72901 Dokploy: Remote Code Execution via volume-backup

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy allows an authenticated low-privilege member to execute arbitrary commands on the control-plane host because the volumeName field accepted by volumeBackup.create and volumeBackup.runManually is interpolated...