---
id: CVE-2026-116068
title: >-
  Dokploy through 0.30.10 Cross-Organization Authorization Bypass via
  Application tRPC Router
summary: >-
  Dokploy through 0.30.10 contains an authorization bypass vulnerability that
  allows owners or admins of any organization to control other tenants'
  applications by supplying foreign applicationId values. Attackers can call
  procedures like …
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-639
vendor: Dokploy
product: dokploy
affected:
  - dokploy <= 0.30.10
published: '2026-10-25'
updated: '2026-10-25'
sourceUpdated: '2026-10-25T11:50:57.177Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-116068'
references:
  - url: 'https://github.com/Dokploy/dokploy/issues/5635'
    label: 'GitHub Issue #5635'
  - url: 'https://github.com/Dokploy/dokploy'
  - url: >-
      https://github.com/Dokploy/dokploy/blob/073713f0b863eca4285ad24db00550af1b39397a/packages/server/src/services/permission.ts#L244-L261
  - url: >-
      https://github.com/Dokploy/dokploy/blob/073713f0b863eca4285ad24db00550af1b39397a/apps/dokploy/server/api/routers/application.ts#L490-L501
  - url: >-
      https://github.com/Dokploy/dokploy/commit/b3cd3c5061b9e4f9a786dc4a048765f79bae2523
  - url: >-
      https://www.vulncheck.com/advisories/dokploy-through-0.30.10-cross-organization-authorization-bypass-via-application-trpc-router
    label: >-
      VulnCheck Advisory: Dokploy through 0.30.10 Cross-Organization
      Authorization Bypass via Application tRPC Router
tags:
  - cve.org
ingestedAt: '2026-10-25T22:08:29.958Z'
---

## Overview

Dokploy through 0.30.10 contains an authorization bypass vulnerability that allows owners or admins of any organization to control other tenants' applications by supplying foreign applicationId values. Attackers can call procedures like saveEnvironment, updateTraefikConfig, deploy, or stop to overwrite environment variables and build secrets, repoint sources, and disrupt other tenants' applications.

## Affected

- `dokploy <= 0.30.10`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.