EUVD-2026-125048

Dokploy 0.28.0 before 0.31.1 contains a path traversal vulnerability that allows authenticated organization members to read arbitrary files by supplying ../ sequences in the filePath of patch.readRepoFile. Attackers with service read permission can read /etc/shadow, SSH private keys, and secret...

CVE-2026-128329

Dokploy versions 0.28.0 before 0.31.1 are vulnerable to a path traversal vulnerability in the patch.readRepoFile function. Authenticated organization members with service read permissions can read arbitrary files by supplying ../ sequences in the filePath parameter. This flaw allows for the unaut...