CVE-2026-128329

Dokploy versions 0.28.0 before 0.31.1 are vulnerable to a path traversal vulnerability in the patch.readRepoFile function. Authenticated organization members with service read permissions can read arbitrary files by supplying ../ sequences in the filePath parameter. This flaw allows for the unaut...