CVE-2026-72736

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy passes user-controlled values directly into shell commands via unquoted template literal interpolation in the registry credential testing and Docker Swarm cluster management endbpoints. Both endpoints have a sa...

CVE-2026-72736: Improper Neutralization of Special Elements used in a Command

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy passes user-controlled values directly into shell commands via unquoted template literal interpolation in the registry credential testing and Docker Swarm cluster management endbpoints. Both endpoints have a sa...