CVE-2026-24841

CriticalCVSS 9.9/10Last modified Jun 17, 2026

Description

Dokploy is a free, self-hostable Platform as a Service (PaaS). In versions prior to 0.26.6, a critical command injection vulnerability exists in Dokploy's WebSocket endpoint `/docker-container-terminal`. The `containerId` and `activeWay` parameters are directly interpolated into shell commands without sanitization, allowing authenticated attackers to execute arbitrary commands on the host server. Version 0.26.6 fixes the issue.

Metrics

CVSS 3.1 9.9/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
Dokploy	dokploy	< 0.26.6

References

https://github.com/Dokploy/dokploy/blob/canary/apps/dokploy/server/wss/docker-container-terminal.tsProduct
https://github.com/Dokploy/dokploy/commit/74e0bd5fe3ef7199f44fcd19c6f5a2f09b806d6fPatch
https://github.com/Dokploy/dokploy/security/advisories/GHSA-vx6x-6559-x35rExploit, Mitigation, Vendor Advisory

Timeline

Published: Jan 28, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-248428.2node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different CVE-2026-248438.4melange allows users to build apk packages using declarative pipelines. In version 0.11.3 to before 0.40.3, an attacker who can influence th CVE-2026-248448.8melange allows users to build apk packages using declarative pipelines. From version 0.3.0 to before 0.40.3, an attacker who can provide bui CVE-2026-248456.5malcontent discovers supply-chain compromises through. context, differential analysis, and YARA. Starting in version 0.10.0 and prior to ver CVE-2026-248465.0malcontent discovers supply-chain compromises through. context, differential analysis, and YARA. Starting in version 1.8.0 and prior to vers CVE-2026-248476.1OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the Eye Exa CVE-2026-248489.9OpenEMR is a free and open source electronic health records and medical practice management application. In 7.0.4 and earlier, the disposeDo CVE-2026-248496.5OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 7.0.4, the `dispos CVE-2026-24854.8IBM Infosphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to stored cross-site scripting. This vulnerability allows a privil CVE-2026-248505.3The ML-DSA crate is a Rust implementation of the Module-Lattice-Based Digital Signature Standard (ML-DSA). Starting in version 0.0.4 and pri CVE-2026-248518.8OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA v1.CVE-2026-248528.1iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles.