{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/dokploy--0.30.10/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:dokploy:dokploy:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-116068"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Dokploy (\u003c= 0.30.10)"],"_cs_severities":["high"],"_cs_tags":["authorization-bypass","cloud-security","web-application"],"_cs_type":"advisory","_cs_vendors":["Dokploy"],"content_html":"\u003cp\u003eDokploy versions up to and including 0.30.10 contain an authorization bypass vulnerability. The flaw resides in the application's handling of \u003ccode\u003eapplicationId\u003c/code\u003e values during API requests. An authenticated user (owner or admin) of one organization can provide a foreign \u003ccode\u003eapplicationId\u003c/code\u003e belonging to a different tenant to invoke administrative procedures.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eConfirmed impact includes the ability for an attacker to overwrite environment variables and build secrets, modify source repository mappings, and perform disruptive actions such as deploying or stopping unauthorized applications across different tenant boundaries.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Dokploy to a patched version beyond 0.30.10 immediately.\u003c/li\u003e\n\u003cli\u003eAudit logs for administrative API calls (specifically saveEnvironment, updateTraefikConfig, deploy, and stop) to identify suspicious cross-tenant application interactions.\u003c/li\u003e\n\u003cli\u003eTemporarily restrict administrative access to the Dokploy interface until the patch is applied.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-25T12:28:21Z","date_published":"2026-10-25T12:28:21Z","id":"https://feed.craftedsignal.io/briefs/2026-10-dokploy-auth-bypass/","summary":"Dokploy versions through 0.30.10 contain an authorization bypass vulnerability allowing authenticated owners or admins to manipulate and disrupt other tenants' applications via malformed applicationId requests.","title":"Dokploy: Authorization bypass and tenant application manipulation (CVE-2026-116068)","url":"https://feed.craftedsignal.io/briefs/2026-10-dokploy-auth-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Dokploy (\u003c= 0.30.10)","version":"https://jsonfeed.org/version/1.1"}