CVE-2026-93425 | Dokploy up to 0.29.12 tRPC Procedure patch-repo.ts patch.readRepoDirectories repoPath os command injection

A vulnerability categorized as very critical has been discovered in Dokploy up to 0.29.12. Affected is the function patch.readRepoDirectories of the file packages/server/src/services/patch-repo.ts of the component tRPC Procedure. The manipulation of the argument repoPath results in os command injection.

This vulnerability is reported as CVE-2026-93425. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More