Horizon Alert
Summary of the vulnerability and why it matters
Dokploy, a self-hostable Platform as a Service, contains a flaw where its schedule router fails to enforce organization and role checks. This allows any authenticated user to manipulate schedules outside their own organization if they know specific identifiers. This could lead to unauthorized script execution on the Dokploy host or target servers, potentially enabling remote code execution.
- Vulnerable: Dokploy schedule router
- Weakness: Missing organization/role checks
- Impact: Remote code execution on servers
Attack Path
How an attacker could exploit the issue
An authenticated user can exploit a vulnerability in Dokploy to gain control over other organizations' schedules and scripts. This occurs when the schedule router fails to enforce proper organization and role checks, allowing any authenticated user to manipulate schedules if they know the schedule ID. The attacker can then leverage schedule types that write and execute scripts on host or remote servers, leading to remote code execution. This compromise can impact affected organizations by allowing unauthorized access and control over their infrastructure, potentially leading to data breaches or system disruption.
- Unauthenticated access to schedule IDs.
- Authenticated user creates, updates, or runs schedules.
- Attacker achieves remote code execution.
Live Threat
Current exploitation, exposure, and threat context
This vulnerability in Dokploy could allow an authenticated user to execute commands on affected systems by manipulating schedule configurations. Attackers could potentially gain control of servers, access sensitive data, or disrupt operations. The remote code execution capability presents a significant risk to business operations.
- Likely attacker skill level: Low
- Required access or conditions: Authenticated user
- Business risk or urgency: High
Priority actions
Operational Fix
Recommended remediation, mitigation, and detection steps
This vulnerability allows authenticated users to perform unauthorized actions on schedules belonging to other organizations within Dokploy. If the affected schedule types are used, this could lead to remote code execution on Dokploy hosts or target servers, posing a significant business risk. The business impact includes potential compromise of infrastructure and sensitive data.
- Identify all Dokploy instances and affected schedules.
- Restrict access to sensitive schedules.
- Apply vendor updates and validate.
- Monitor for related activity.
