Threats tagged 'ghsa-gfc5-hfj7-fjwc'

Dokploy versions before 0.31.1 have an OS command injection vulnerability in the getComposeContainerCommand() function. Authenticated organization members can exploit this flaw by injecting shell commands via the serviceName parameter. These commands are executed as root when scheduled backups run, allowing attackers to take over the host through the mounted Docker socket.