https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T18:29:49.534173+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-350826 EUVD-2026-350826 2026-10-09T18:29:49.566421+00:00 EUVD-2026-350826 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72738 fkie_cve-2026-72738 2026-10-09T18:29:49.566467+00:00

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the backup.listBackupFiles tRPC endpoint in apps/dokploy/server/api/routers/backup.ts passes the search parameter through normalizeS3Path and interpolates it into an rclone lsjson command executed by child_process.exec(), allowing an authenticated user with backup:read permission to execute arbitrary commands on the Dokploy host. This issue is fixed in version 0.29.13.