CVE-2026-72735 | Dokploy up to 0.29.12 Traefik Configuration application.ts writeTraefikConfigRemote os command injection

A vulnerability was found in Dokploy up to 0.29.12 and classified as critical. Impacted is the function writeTraefikConfigRemote of the file packages/server/src/utils/traefik/application.ts of the component Traefik Configuration. Executing a manipulation can lead to os command injection.

This vulnerability is tracked as CVE-2026-72735. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More