CVE-2026-72734 | Dokploy up to 0.29.12 Server Removal server.ts server.remove serverId missing encryption

August 10, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Dokploy up to 0.29.12. This vulnerability affects the function server.remove of the file apps/dokploy/server/api/routers/server.ts of the component Server Removal. Such manipulation of the argument serverId leads to missing encryption of sensitive data.

This vulnerability is referenced as CVE-2026-72734. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More