Vulnerability · Published Oct 25, 2026 · Assigned by VulnCheck

CVE-2026-116068Dokploy through 0.30.10 Cross-Organization Authorization Bypass via Application tRPC Router

High 8.8

In plain English

A high-severity authorization bypass via user-controlled key in dokploy from Dokploy. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)0.3%top 75.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Dokploy through 0.30.10 contains an authorization bypass vulnerability that allows owners or admins of any organization to control other tenants' applications by supplying foreign applicationId values. Attackers can call procedures like saveEnvironment, updateTraefikConfig, deploy, or stop to overwrite environment variables and build secrets, repoint sources, and disrupt other tenants' applications.

Affected products (as reported)

Vendor	Product	Versions
Dokploy	dokploy	0 – through 0.30.10

Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

GitHub Issue #5635 issue-tracking
https://github.com/Dokploy/dokploy product
https://github.com/Dokploy/dokploy/blob/073713f0b863eca4285ad24db00550af1b39397a/packages/server/src/services/permission.ts#L244-L261 technical-description
https://github.com/Dokploy/dokploy/blob/073713f0b863eca4285ad24db00550af1b39397a/apps/dokploy/server/api/routers/application.ts#L490-L501 technical-description
https://github.com/Dokploy/dokploy/commit/b3cd3c5061b9e4f9a786dc4a048765f79bae2523 patch
VulnCheck Advisory: Dokploy through 0.30.10 Cross-Organization Authorization Bypass via Application tRPC Router third-party-advisory