CVE-2026-72738 | Dokploy up to 0.29.12 Backup Endpoint backup.ts child_process.exec Search privileges management

A vulnerability was found in Dokploy up to 0.29.12. It has been declared as critical. The impacted element is the function child_process.exec of the file apps/dokploy/server/api/routers/backup.ts of the component Backup Endpoint. The manipulation of the argument Search results in improper privilege management.

This vulnerability is cataloged as CVE-2026-72738. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More