Path Traversal Vulnerability in Dokploy

Dokploy versions 0.29.7 and earlier contain a critical path traversal vulnerability (CVE-2026-82954) located within the writeTraefikConfigInPath function in packages/server/src/utils/traefik/application.ts. The flaw allows remote, unauthenticated attackers to manipulate the 'path' argument, leading to arbitrary file system access. This vulnerability permits the reading or overwriting of sensitive configuration files, which can be leveraged to gain unauthorized system control. The vulnerability is publicly disclosed, and given the nature of the software as a deployment management tool, successful exploitation carries a high risk of systemic compromise. The vendor has not provided a response or a patch as of the time of disclosure.

Impact

The vulnerability carries a CVSS v3.1 base score of 9.9, reflecting its critical potential for unauthorized file access and system-level impact. Attackers targeting this vulnerability can extract sensitive environment variables, credentials, or Traefik configuration files, potentially escalating access to any containerized workloads managed by the Dokploy instance.

Recommendation

• Monitor web application logs for suspicious path traversal patterns (e.g., directory indexing characters like "../") directed at Dokploy management endpoints.
• Apply network segmentation to ensure Dokploy management interfaces are not exposed to the public internet until a security patch is released by the vendor.
• Conduct an audit of the file system integrity in the Dokploy server environment to identify signs of unauthorized file modification or exfiltration.