CVE-2026-111331
mediumDokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router that allows authenticated owners or admins of any organizatio…
Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router that allows authenticated owners or admins of any organization to manage other tenants' ports because the target application's organization is never verified. Attackers supplying a known portId or applicationId to port.create, port.one, port.update, or port.delete can read, modify, delete, or add port mappings, disrupting how victim services are published.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affected products
Not reported by the source (unknown — not "none").
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- https://github.com/Dokploy/dokploy disclosure@vulncheck.com
- https://github.com/Dokploy/dokploy/blob/v0.30.8/apps/dokploy/server/api/routers/port.ts#L1... disclosure@vulncheck.com
- https://github.com/Dokploy/dokploy/blob/v0.30.8/packages/server/src/services/permission.ts... disclosure@vulncheck.com
- https://hackmd.io/@hieuPenguinnn/dokploy-port-router-cross-org-idor disclosure@vulncheck.com
- https://www.vulncheck.com/advisories/dokploy-through-0.30.8-cross-organization-authorizati... disclosure@vulncheck.com
- https://hackmd.io/@hieuPenguinnn/dokploy-port-router-cross-org-idor 134c704f-9b21-4f2e-91b3-4a467353bcc0