CVE-2026-129433

Dokploy before 0.31.1 contains an OS command injection vulnerability in getComposeContainerCommand that allows authenticated organization members to execute shell commands via the serviceName parameter. Attackers can store serviceName values with shell metacharacters through backup.create or...