---
id: CVE-2026-72883
title: 'Dokploy is a free, self-hostable Platform as a Service (PaaS)'
summary: >-
  Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to
  0.29.13, the WebSocket handlers in apps/dokploy/server/wss/terminal.ts,
  apps/dokploy/server/wss/docker-container-terminal.ts,
  apps/dokploy/server/wss/docker-containe…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-862
published: '2026-08-10'
updated: '2026-09-08'
sourceUpdated: '2026-09-08T20:54:37.790'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-72883'
references:
  - url: >-
      https://github.com/Dokploy/dokploy/commit/1bc76e9e5b8a9acd14a58cd8a1828c25918f162e
    label: security-advisories@github.com
  - url: >-
      https://github.com/Dokploy/dokploy/commit/68f5afae42fca353dcb3d3bc6219ffe9e168cb91
    label: security-advisories@github.com
  - url: 'https://github.com/Dokploy/dokploy/pull/4865'
    label: security-advisories@github.com
  - url: 'https://github.com/Dokploy/dokploy/releases/tag/v0.29.13'
    label: security-advisories@github.com
  - url: 'https://github.com/Dokploy/dokploy/security/advisories/GHSA-qf9j-c9p4-r4xp'
    label: security-advisories@github.com
tags:
  - nvd
epss: 0.00569
epssPercentile: 0.44786
ingestedAt: '2026-09-08T21:11:12.274Z'
---

## Overview

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the WebSocket handlers in apps/dokploy/server/wss/terminal.ts, apps/dokploy/server/wss/docker-container-terminal.ts, apps/dokploy/server/wss/docker-container-logs.ts, and apps/dokploy/server/wss/docker-stats.ts validate organization membership but do not enforce checkServiceAccess, accessedServerIds, or accessedServices, allowing an authenticated organization member to obtain root terminal access and read logs or statistics for restricted servers and services. This issue is fixed in version 0.29.13.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.