Dokploy: unquoted dockerImage field gives command execution on the build host

Impact

The dockerImage field of an application is validated only as an optional string and then interpolated unquoted into a shell command in buildRemoteDocker(), so shell command substitution in that field runs as the build process on the local build host or on the remote SSH build target. Any member who can create or update an application - a routine permission on a shared instance - reaches it. The build host is where registry credentials, deploy keys and every other project's source live, so this is a straight path from ordinary application permissions to the secrets of unrelated projects. Distinct from the volume-backup and registry-credential injections fixed in the same release: different field, different code path, different commit.

Who can reach it

Network access to the Dokploy API with an authenticated account holding application create or update permission. Triggered when the application is built, on whichever host does the build.

What to do

Upgrade to Dokploy 0.29.13 and restart the Dokploy stack (fix in commit cba0b25). No mitigation short of the upgrade is published; restricting who holds application create/update permission reduces the pool of callers but does not close the path. The restart interrupts in-flight builds and deploys. Treat registry credentials and deploy keys reachable from the build host as potentially exposed on a shared instance.

References

Related entries

• OpenChoreo cluster-gateway: unauthenticated management API exposes data-plane Kubernetes API and pod execCVE-2026-73843 · OpenChoreo cluster-gateway (agent listener management API)Critical
• Rancher: SAML assertion replay: the ACS handler does not enforce one-time use, so a captured assertion logsCVE-2026-44946 · RancherCritical
• Coolify: low-privileged member injects Docker Compose directives and gets root on the hostCVE-2025-59156 · Coolify (application deployment workflow, Docker Compose directives)Critical
• Kyverno: percent-encoded traversal in Policy apiCall urlPath escapes the namespace clamp to cluster adminCVE-2026-100706 · Kyverno admission controller (Policy apiCall urlPath namespace clamp)Critical
• Docker Hub: converting an account reassigned a PAT to another user without rotating the secretCVE-2026-105445 · Docker Hub (account-to-organization conversion, personal access tokens)Critical
• Kyverno: namespaced mutating policy can fabricate cross-namespace targets and overwrite cluster-wide resourcesCVE-2026-122303 · Kyverno (NamespacedMutatingPolicy mutate-existing targetMatchConstraints)Critical