CVE-2026-129433

Dokploy versions prior to 0.31.1 are vulnerable to an OS command injection flaw in the getComposeContainerCommand() function. Authenticated organization members can exploit this by providing serviceName values containing shell metacharacters through the backup.create or backup.update tRPC procedu...