CVE-2026-72886 | Dokploy 0.29.2/0.29.12 Schedule schedule.ts schedule.create/schedule.update applicationId/composeId privileges management

A vulnerability has been found in Dokploy 0.29.2/0.29.12 and classified as very critical. Impacted is the function schedule.create/schedule.update of the file apps/dokploy/server/api/routers/schedule.ts of the component Schedule. The manipulation of the argument applicationId/composeId leads to improper privilege management.

This vulnerability is uniquely identified as CVE-2026-72886. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More