---
id: CVE-2026-111331
title: >-
  Dokploy through 0.30.8 Cross-Organization Authorization Bypass via port tRPC
  Router
summary: >-
  Dokploy through 0.30.8 contains a cross-organization authorization bypass in
  the port tRPC router that allows authenticated owners or admins of any
  organization to manage other tenants' ports because the target application's
  organization…
severity: medium
cvss: 6.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L'
cvssSource: cna
cwe:
  - CWE-639
vendor: Dokploy
product: Dokploy
affected:
  - Dokploy <= 0.30.8
published: '2026-10-15'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T21:43:34.445Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-111331'
references:
  - url: 'https://hackmd.io/@hieuPenguinnn/dokploy-port-router-cross-org-idor'
  - url: >-
      https://github.com/Dokploy/dokploy/blob/v0.30.8/apps/dokploy/server/api/routers/port.ts#L17-L113
  - url: >-
      https://github.com/Dokploy/dokploy/blob/v0.30.8/packages/server/src/services/permission.ts#L244-L261
  - url: 'https://github.com/Dokploy/dokploy'
  - url: >-
      https://www.vulncheck.com/advisories/dokploy-through-0.30.8-cross-organization-authorization-bypass-via-port-trpc-router
    label: >-
      VulnCheck Advisory: Dokploy through 0.30.8 Cross-Organization
      Authorization Bypass via port tRPC Router
tags:
  - cve.org
ingestedAt: '2026-10-15T22:48:25.453Z'
---

## Overview

Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router that allows authenticated owners or admins of any organization to manage other tenants' ports because the target application's organization is never verified. Attackers supplying a known portId or applicationId to port.create, port.one, port.update, or port.delete can read, modify, delete, or add port mappings, disrupting how victim services are published.

## Affected

- `Dokploy <= 0.30.8`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.