CVE-2026-72881 | Dokploy up to 0.29.12 Database Backup/Restore Command Builders utils.ts child_process.exec os command injection

August 10, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Dokploy up to 0.29.12. The impacted element is the function child_process.exec of the file packages/server/src/utils/backups/utils.ts of the component Database Backup/Restore Command Builders. Such manipulation leads to os command injection.

This vulnerability is listed as CVE-2026-72881. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More