Path Traversal Vulnerability in Dokploy Affects Settings Component

⚠️ CVE-Referenzen: CVE-2026-82954
Dokploy - Dokploy - CRITICAL - CVE-2026-82954. A concerning vulnerability has been identified in Dokploy version 0.29.7, specifically impacting the Settings component within the function writeTraefikConfigInPath. This flaw allows malicious actors to manipulate the 'path' argument, enabling them to execute path traversal attacks. Consequently, attackers can access directories and files outside the intended directory structure. Given that the exploit is now publicly available, it significantly raises the urgency for users to patch their installations. The vendor was informed of the issue prior to its disclosure but did not respond to address the concern.
Quelle: securityvulnerability.io