Dokploy: registry password and URL interpolated unescaped into a swarm deploy command

Impact

getRegistryCommands() builds a shell command from registry.password and registry.registryUrl without escaping, so a member who can configure a registry and trigger a swarm deployment executes arbitrary commands on the Dokploy server itself. With the Dokploy process holding Docker socket access, that reads and modifies host files and reaches every other container on the box - the control plane, not just one tenant's workload. Note the fixed version differs from the other Dokploy injections in this batch: this one is fixed in 0.29.8, the others in 0.29.13, so an operator sitting between those releases is exposed to one set and not the other.

Who can reach it

Network access to the Dokploy API with an authenticated account that has project access sufficient to configure registry credentials and start a swarm deployment. Execution happens on the Dokploy server when the deployment runs.

What to do

Upgrade to Dokploy 0.29.8 or later and restart the Dokploy stack (fix in commit 1f4f940); 0.29.13 is the right target anyway because of the other injections fixed there. No mitigation short of the upgrade is published. The restart interrupts in-flight deploys but does not require draining managed nodes. On a shared instance, rotate registry credentials and anything else reachable from the Dokploy host.

References

Related entries

• Kyverno: overlapping PolicyExceptions let a tenant bypass an enforce-mode policyCVE-2026-84200 · Kyverno admission controller (PolicyException handling)Critical
• Kyverno: 3DES cipher suites offered on TLS endpoints expose long-lived sessions to Sweet32CVE-2023-54356 · Kyverno TLS endpoints (3DES cipher suites)Critical
• kaniko: unanchored ACR hostname match leaks Azure identity tokens to a lookalike registryCVE-2026-105769 · kaniko (Azure Container Registry credential helper host matching)Critical
• Kyverno: generate rules are authorized against the controller's RBAC, not the policy author'sCVE-2026-122302 · Kyverno admission controller (generate-rule permission check)Critical
• Kata Containers: Kata with Cloud Hypervisor allows a user to break the VM isolation boundaryCVE-2026-24834 · Kata ContainersCritical
• runwasi wasmtime shim: crafted OCI layer is deserialized as native code, escaping the WASI sandboxCVE-2026-47218 · containerd runwasi containerd-shim-wasmtime-v1 (precompile-cache path)Critical