CVE-2026-72902

The vulnerability in Dokploy 0.29.12 and earlier isn't a case of developers not knowing how to avoid shell injection — it's a case of them already having written the safe approach and then not using it. The execAsyncRemote function accepts a password field and interpolates it directly into a shell command, but a safeDockerLoginCommand function exists in the same codebase that handles this correctly. That gap is the real story. Check your version: this affects all releases before 0.29.13. The vulnerable code path runs during registry authentication operations, which in Dokploy's architecture are directly tied to deployment flows. An authenticated user with registry configuration privileges can inject arbitrary shell commands that execute on the host running the Dokploy agent — not just in their own containers. What matters now is whether 0.29.13 actually closes the class or just these two call sites. Specifically, verify that safeDockerLoginCommand is now the mandatory pattern for any execAsyncRemote call that handles credentials — not just a recommended alternative. Also confirm that execAsyncRemote itself doesn't accept unsanitized string interpolation elsewhere; if other fields like image names or tag parameters still get shell-interpolated, the injection surface remains. Run a grep across your codebase for execAsyncRemote calls that construct command strings with template literals or string concatenation — those are the patterns that need review. The CVSS 9.9 is technically accurate given the impact, but it masks a process failure that simple patching doesn't address. Demand evidence that the fix includes automated prevention: a linter rule blocking shell interpolation in execAsyncRemote arguments, or a code review requirement that all execAsyncRemote callers route through validated command builders. If the team just replaced these two call sites and moved on, the next registry authentication variant will likely reproduce the same mistake.

Reviewed through automated stages and approved by a human before publication.