Beschreibung
Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.27.0 to before 0.29.3, a hardcoded BETTER_AUTH_SECRET fallback (-better-auth-secret-123456789-) lets an unauthenticated attacker forge email verification JWTs, trigger auto-sign-in as admin, and execute commands on the host via the built-in SSH terminal. This vulnerability is fixed in 0.29.3.
CVSS 10EPSS 0.35100000000000003%Risiko 1.03
Quelle öffnen- Veröffentlicht
- 2026-05-29 18:17:11
- Betroffene Versionen
- <0.29.3
- Typ
- Core software
- Zuletzt geändert
- 2026-07-22 06:10:00
- Vektor
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H