Dokploy: the validator allows the backtick — a member's database password change is host RCE, 9.9 on the vendor's own vector (v0.31.0, live-proven)
oss-sec: Dokploy: the validator allows the backtick — a member's database password change is host RCE, 9.9 on the vendor's own vector (v0.31.0, live-proven)
Posted by theknell on Nov 09 Dokploy's pitch is a self-hosted panel that holds the keys to everything
it manages: root on every server in the fleet, the Docker socket, and the
credentials of every database and application it deploys. 38,000 stars,
514 official templates. The panel is, by design, the most trusted process
on the host.
The validator allows the backtick. Tested against dokploy/dokploy
v0.31.0 (official image, digest sha256:f836f0ab…0953):
1. The...
seclists.org
November 10, 2026 at 3:05 AM
Dokploy: the validator allows the backtick — a member's database password change is host RCE, 9.9 on the vendor's own vector (v0.31.0, live-proven)
I think I'm in a similar boat :/. Was really rooting for them. But "Fool me, you can't get fooled again"
Dokploy is winning out atm with a similar ui to railway (bring your own servers tho), and I have a tangled spindle running railpack to the the `railway up` styled containers
dokploy.com
Dokploy is winning out atm with a similar ui to railway (bring your own servers tho), and I have a tangled spindle running railpack to the the `railway up` styled containers
dokploy.com
Dokploy - Deploy your applications with ease
Deploy your applications with ease using Dokploy
dokploy.com
November 4, 2026 at 4:02 PM
I think I'm in a similar boat :/. Was really rooting for them. But "Fool me, you can't get fooled again"
Dokploy is winning out atm with a similar ui to railway (bring your own servers tho), and I have a tangled spindle running railpack to the the `railway up` styled containers
dokploy.com
Dokploy is winning out atm with a similar ui to railway (bring your own servers tho), and I have a tangled spindle running railpack to the the `railway up` styled containers
dokploy.com
I'll have to revisit my decision to use Dokploy soon.
The recent releases are looking awesome!
The recent releases are looking awesome!
November 6, 2026 at 10:53 AM
I'll have to revisit my decision to use Dokploy soon.
The recent releases are looking awesome!
The recent releases are looking awesome!
📢 New #updates · 5 Nov #8
· dokploy v0.31.0 — Fix 6 critical alerts and improve UI and auth
· dokploy v0.31.0 — Fix 6 critical alerts and improve UI and auth
November 5, 2026 at 10:57 AM
📢 New #updates · 5 Nov #8
· dokploy v0.31.0 — Fix 6 critical alerts and improve UI and auth
· dokploy v0.31.0 — Fix 6 critical alerts and improve UI and auth
the self-hosted PaaS is having a moment.
not because hosting is fun — because the alternative is renting your own product back from someone else.
coolify, Dokploy, CapRover. your box, your rules, your bill.
https://mycrab.space
#selfhosted #devtools #homelab
not because hosting is fun — because the alternative is renting your own product back from someone else.
coolify, Dokploy, CapRover. your box, your rules, your bill.
https://mycrab.space
#selfhosted #devtools #homelab
November 4, 2026 at 5:11 AM
the self-hosted PaaS is having a moment.
not because hosting is fun — because the alternative is renting your own product back from someone else.
coolify, Dokploy, CapRover. your box, your rules, your bill.
https://mycrab.space
#selfhosted #devtools #homelab
not because hosting is fun — because the alternative is renting your own product back from someone else.
coolify, Dokploy, CapRover. your box, your rules, your bill.
https://mycrab.space
#selfhosted #devtools #homelab
We use Dokploy as part of the Community Infra Circle. Just reviewing our setup and figuring out what else we need. (we also have a Railway account)
One concern (many such cases) is Dokploy's "enterprise" not-really-open-source.
We may hack it to add SSO via atproto...
One concern (many such cases) is Dokploy's "enterprise" not-really-open-source.
We may hack it to add SSO via atproto...
November 4, 2026 at 4:07 PM
We use Dokploy as part of the Community Infra Circle. Just reviewing our setup and figuring out what else we need. (we also have a Railway account)
One concern (many such cases) is Dokploy's "enterprise" not-really-open-source.
We may hack it to add SSO via atproto...
One concern (many such cases) is Dokploy's "enterprise" not-really-open-source.
We may hack it to add SSO via atproto...
The tipping point usually hits when a cloud provider starts charging platform markups on idle compute and ingress. Running Dokploy or Coolify on a bare-metal box or cheap VPS pays for itself fast, provided you set up automated database snapshots off-host before touching the deploy button.
November 4, 2026 at 6:33 AM
The tipping point usually hits when a cloud provider starts charging platform markups on idle compute and ingress. Running Dokploy or Coolify on a bare-metal box or cheap VPS pays for itself fast, provided you set up automated database snapshots off-host before touching the deploy button.
How's your pipeline with Cloudflare deployment? I'm switching off of self-hosting a VPS with Dokploy and using a lot of Cloudflare Workers
October 30, 2026 at 2:13 AM
How's your pipeline with Cloudflare deployment? I'm switching off of self-hosting a VPS with Dokploy and using a lot of Cloudflare Workers
Might rebuild my VPS on Dokploy later but haven’t committed to the decision yet. I love Dokku but sometimes it’s not quite enough, and now, before I’ve got much running on it, is the best time to decide what I’m going to do with it. Just need to get the security down and hide away the admin bits.
November 1, 2026 at 3:14 PM
Might rebuild my VPS on Dokploy later but haven’t committed to the decision yet. I love Dokku but sometimes it’s not quite enough, and now, before I’ve got much running on it, is the best time to decide what I’m going to do with it. Just need to get the security down and hide away the admin bits.
Vlastní hosting místo Vercelu: Coolify, Dokploy a Kamal v praxi
Vlastní hosting místo Vercelu: Coolify, Dokploy a Kamal v praxi
zdrojak.cz
October 28, 2026 at 12:03 PM
Vlastní hosting místo Vercelu: Coolify, Dokploy a Kamal v praxi
Dokploy is a self-hosted deployment and application management platform, an open source alternative to Vercel, Netlify, and Heroku. It supports containerised apps, databases, Docker Compose, monitoring, backups, and multi-server Docker Swarm. https://openaltfinder.com/tools/dokploy #opensource
Dokploy: Open Source Netlify Alternative | OpenAltFinder
Open Source Alternative to Vercel, Netlify and Heroku.
openaltfinder.com
October 25, 2026 at 6:00 AM
Dokploy is a self-hosted deployment and application management platform, an open source alternative to Vercel, Netlify, and Heroku. It supports containerised apps, databases, Docker Compose, monitoring, backups, and multi-server Docker Swarm. https://openaltfinder.com/tools/dokploy #opensource
Un outil qui se rapproche d'une version open source de ce que proposent Vercel ou Netlify pour déployer vos applications facilement. Pas testé.
🔗 https://dokploy.com/
#Docker #deploiement #outil
🔗 https://dokploy.com/
#Docker #deploiement #outil
Dokploy - Deploy your applications with ease
Deploy your applications with ease using Dokploy
dokploy.com
October 25, 2026 at 7:09 PM
Un outil qui se rapproche d'une version open source de ce que proposent Vercel ou Netlify pour déployer vos applications facilement. Pas testé.
🔗 https://dokploy.com/
#Docker #deploiement #outil
🔗 https://dokploy.com/
#Docker #deploiement #outil
CVE-2026-116068 - dokploy
If you use Dokploy version 0.30.10 or earlier, an admin of one organization can issue commands that affect applications belonging to a different organization. This can let them change…
Too many irrelevant or confusing CVEs? Use stackflag.com
#dokploy #CVE #infosec
If you use Dokploy version 0.30.10 or earlier, an admin of one organization can issue commands that affect applications belonging to a different organization. This can let them change…
Too many irrelevant or confusing CVEs? Use stackflag.com
#dokploy #CVE #infosec
CVE-2026-116068: Dokploy lets admins control other tenants’ apps
If you use Dokploy version 0.30.10 or earlier, an admin of one organization can issue commands that affect applications belonging to a different.
stackflag.com
October 26, 2026 at 3:00 AM
CVE-2026-116068 - dokploy
If you use Dokploy version 0.30.10 or earlier, an admin of one organization can issue commands that affect applications belonging to a different organization. This can let them change…
Too many irrelevant or confusing CVEs? Use stackflag.com
#dokploy #CVE #infosec
If you use Dokploy version 0.30.10 or earlier, an admin of one organization can issue commands that affect applications belonging to a different organization. This can let them change…
Too many irrelevant or confusing CVEs? Use stackflag.com
#dokploy #CVE #infosec
I’m self-hosting Umami to track traffic across my projects.
Stack:
- Hetzner (VPS)
- Dokploy (PaaS)
- Tailscale (secure connectivity)
- Umami (analytics)
Umami does everything I need, so I don’t see a reason to pay for another analytics tool.
Stack:
- Hetzner (VPS)
- Dokploy (PaaS)
- Tailscale (secure connectivity)
- Umami (analytics)
Umami does everything I need, so I don’t see a reason to pay for another analytics tool.
October 26, 2026 at 7:34 AM
I’m self-hosting Umami to track traffic across my projects.
Stack:
- Hetzner (VPS)
- Dokploy (PaaS)
- Tailscale (secure connectivity)
- Umami (analytics)
Umami does everything I need, so I don’t see a reason to pay for another analytics tool.
Stack:
- Hetzner (VPS)
- Dokploy (PaaS)
- Tailscale (secure connectivity)
- Umami (analytics)
Umami does everything I need, so I don’t see a reason to pay for another analytics tool.
Dokploy vs Coolify: qué elegir en 2026
Dokploy vs Coolify: comparamos ambas plataformas de deployment para que elijas la mejor opción en 2026. ¡Enterate ya de cuál te conviene más!
#dokploy #coolify #dockerswarm #selfhosted #devops
Dokploy vs Coolify: comparamos ambas plataformas de deployment para que elijas la mejor opción en 2026. ¡Enterate ya de cuál te conviene más!
#dokploy #coolify #dockerswarm #selfhosted #devops
Dokploy vs Coolify: qué elegir en 2026
Coolify vs Dokploy con datos de precios, Docker Swarm y multiservidor según la comparación de dev.to de octubre 2026.
donweb.news
October 25, 2026 at 7:28 AM
🚨 EUVD-2026-109382
📊 8.7/10
🏢 Dokploy
📝 Dokploy through 0.30.10 contains an authorization bypass vulnerability that allows owners or admins of any organization to control other tenants' applic...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-109382
#cybersecurity #infosec #cve #euvd
📊 8.7/10
🏢 Dokploy
📝 Dokploy through 0.30.10 contains an authorization bypass vulnerability that allows owners or admins of any organization to control other tenants' applic...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-109382
#cybersecurity #infosec #cve #euvd
October 25, 2026 at 1:01 PM
🚨 EUVD-2026-109382
📊 8.7/10
🏢 Dokploy
📝 Dokploy through 0.30.10 contains an authorization bypass vulnerability that allows owners or admins of any organization to control other tenants' applic...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-109382
#cybersecurity #infosec #cve #euvd
📊 8.7/10
🏢 Dokploy
📝 Dokploy through 0.30.10 contains an authorization bypass vulnerability that allows owners or admins of any organization to control other tenants' applic...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-109382
#cybersecurity #infosec #cve #euvd
🟠 CVE-2026-116068 - High (8.8)
Dokploy through 0.30.10 contains an authorization bypass vulnerability that allows owners or admi...
https://www.thehackerwire.com/vulnerability/CVE-2026-116068/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
Dokploy through 0.30.10 contains an authorization bypass vulnerability that allows owners or admi...
https://www.thehackerwire.com/vulnerability/CVE-2026-116068/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
October 25, 2026 at 12:45 PM
🟠 CVE-2026-116068 - High (8.8)
Dokploy through 0.30.10 contains an authorization bypass vulnerability that allows owners or admi...
https://www.thehackerwire.com/vulnerability/CVE-2026-116068/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
Dokploy through 0.30.10 contains an authorization bypass vulnerability that allows owners or admi...
https://www.thehackerwire.com/vulnerability/CVE-2026-116068/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
How to Install #Dokploy on #Ubuntu #VPS
This article provides a guide demonstrating how to install Dokploy on Ubuntu VPS.
What is Dokploy?
Dokploy is a self-hosted Platform as a Service, or PaaS, that ...
Continued 👉 #selfhosted #letsencrypt #postgresql #selfhosting #opensource #certbot #paas
This article provides a guide demonstrating how to install Dokploy on Ubuntu VPS.
What is Dokploy?
Dokploy is a self-hosted Platform as a Service, or PaaS, that ...
Continued 👉 #selfhosted #letsencrypt #postgresql #selfhosting #opensource #certbot #paas
How to Install Dokploy on Ubuntu VPS
blog.radwebhosting.com
October 23, 2026 at 3:30 PM
How to Install #Dokploy on #Ubuntu #VPS
This article provides a guide demonstrating how to install Dokploy on Ubuntu VPS.
What is Dokploy?
Dokploy is a self-hosted Platform as a Service, or PaaS, that ...
Continued 👉 #selfhosted #letsencrypt #postgresql #selfhosting #opensource #certbot #paas
This article provides a guide demonstrating how to install Dokploy on Ubuntu VPS.
What is Dokploy?
Dokploy is a self-hosted Platform as a Service, or PaaS, that ...
Continued 👉 #selfhosted #letsencrypt #postgresql #selfhosting #opensource #certbot #paas
Ca reste super. J'aime beaucoup. J'ai pas testé dokploy ou easypanel. Mais je conseille les 3 quand on a peu de ressources et peu de culture ops.
A partir de 35, la je commence à trouver ca pénible :)
A partir de 35, la je commence à trouver ca pénible :)
October 24, 2026 at 5:19 PM
Ca reste super. J'aime beaucoup. J'ai pas testé dokploy ou easypanel. Mais je conseille les 3 quand on a peu de ressources et peu de culture ops.
A partir de 35, la je commence à trouver ca pénible :)
A partir de 35, la je commence à trouver ca pénible :)
Dokploy 0.30.10以下で、組織のオーナー/管理者が他テナントのアプリケーションを制御できる脆弱性。環境変数やビルドシークレットの書き換え、ソースの再指定、アプリケーションの停止が可能。
CVE-2026-116068 CVSS 8.8 | HIGH
CVE-2026-116068 CVSS 8.8 | HIGH
NVD - Home
nvd.nist.gov
October 25, 2026 at 4:00 PM
Dokploy 0.30.10以下で、組織のオーナー/管理者が他テナントのアプリケーションを制御できる脆弱性。環境変数やビルドシークレットの書き換え、ソースの再指定、アプリケーションの停止が可能。
CVE-2026-116068 CVSS 8.8 | HIGH
CVE-2026-116068 CVSS 8.8 | HIGH
Self-hosted alternative to Vercel and Coolify. Git push, HTTPS, logs, rollback. No Kubernetes.
https://www.echojs.com/news/43451
#JavaScript
https://www.echojs.com/news/43451
#JavaScript
Levelrail: a self-hosted PaaS and Coolify alternative
Deploy on git push with logs, metrics and rollback on your own servers. One Go binary, no Kubernetes, Apache 2.0. Coolify and Dokploy alternative.
levelrail.com
October 24, 2026 at 8:32 PM
Self-hosted alternative to Vercel and Coolify. Git push, HTTPS, logs, rollback. No Kubernetes.
https://www.echojs.com/news/43451
#JavaScript
https://www.echojs.com/news/43451
#JavaScript
Крутой открытый софт: Dokploy - self-hosted замена Vercel. Деплой приложений, баз и Docker Compose на любом VPS одной командой. Разбор в Telegram: https://t.me/the_sintez #софт #ai #opensource #нейросети #разработка
October 23, 2026 at 5:58 AM
Крутой открытый софт: Dokploy - self-hosted замена Vercel. Деплой приложений, баз и Docker Compose на любом VPS одной командой. Разбор в Telegram: https://t.me/the_sintez #софт #ai #opensource #нейросети #разработка
Awesome open-source AI: Dokploy is a self-hosted Vercel alternative. Deploy apps, databases and Docker Compose on any VPS with one command. Full setup & guide in Telegram: https://t.me/synthesis_feed #ai #tech #opensource #coding #devtools #automation
October 23, 2026 at 5:58 AM
Awesome open-source AI: Dokploy is a self-hosted Vercel alternative. Deploy apps, databases and Docker Compose on any VPS with one command. Full setup & guide in Telegram: https://t.me/synthesis_feed #ai #tech #opensource #coding #devtools #automation