Vulnerability · Published Oct 15, 2026 · Assigned by VulnCheck

CVE-2026-111331Dokploy through 0.30.8 Cross-Organization Authorization Bypass via port tRPC Router

Medium 6.3

In plain English

A medium-severity authorization bypass via user-controlled key in Dokploy from Dokploy. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities).

Severity (CVSS 3.1)6.3Medium

Exploit odds (30 days)0.3%top 74.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router that allows authenticated owners or admins of any organization to manage other tenants' ports because the target application's organization is never verified. Attackers supplying a known portId or applicationId to port.create, port.one, port.update, or port.delete can read, modify, delete, or add port mappings, disrupting how victim services are published.

Affected products (as reported)

Vendor	Product	Versions
Dokploy	Dokploy	0 – through 0.30.8

Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

References

https://hackmd.io/@hieuPenguinnn/dokploy-port-router-cross-org-idor third-party-advisory
https://github.com/Dokploy/dokploy/blob/v0.30.8/apps/dokploy/server/api/routers/port.ts#L17-L113 technical-description
https://github.com/Dokploy/dokploy/blob/v0.30.8/packages/server/src/services/permission.ts#L244-L261 technical-description
https://github.com/Dokploy/dokploy product
VulnCheck Advisory: Dokploy through 0.30.8 Cross-Organization Authorization Bypass via port tRPC Router third-party-advisory