Horizon Alert
Summary of the vulnerability and why it matters
This advisory details a critical vulnerability in Dokploy, a self-hostable Platform as a Service, that could allow an authenticated user to execute arbitrary commands on a remote server through file mount configurations. The issue, if exploited, could lead to a compromise of the managed server.
- Injected commands can run on servers.
- Critical flaw impacts server command execution.
- Confirm relevance to protect managed infrastructure.
Attack Path
How an attacker could exploit the issue
An attacker with existing access to Dokploy can exploit this vulnerability by creating or updating a file mount for a service. By injecting special characters into the `filePath` field, the attacker can trick Dokploy into running arbitrary commands on the remote server via SSH. This could lead to full control over the managed server if Dokploy is configured in its default deployment model.
- Authenticated user with file mount access.
- Injecting shell metacharacters in `filePath`.
- Remote code execution on managed servers.
Live Threat
Current exploitation, exposure, and threat context
An authenticated user with file mount creation or update privileges could inject shell metacharacters into a file path. This could lead to the execution of attacker-controlled commands on the remote managed server over SSH, potentially resulting in remote code execution from the web interface, especially in default deployment models.
- Remote managed server access.
- Attacker-controlled commands via file mounts.
- Direct remote code execution.
Operational Fix
Recommended remediation, mitigation, and detection steps
Given Dokploy is a self-hostable PaaS, application owners and platform teams are likely responsible for managing its security. The initial step is to identify all Dokploy instances, confirm their reachability and criticality, and then determine the accountable owner to plan remediation based on risk.
- Application and platform teams should own.
- Verify Dokploy instance reachability and criticality.
- Plan remediation based on identified risk.
