What’s Vulnerable › Vulnerabilities

CVE-2026-111331: Dokploy through 0.30.8 Cross-Organization Authorization Bypass via port tRPC Router

• Severity: medium (CVSS 6.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-15 · updated 2026-10-16
• Weakness: CWE-639

Description

Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router that allows authenticated owners or admins of any organization to manage other tenants' ports because the target application's organization is never verified. Attackers supplying a known portId or applicationId to port.create, port.one, port.update, or port.delete can read, modify, delete, or add port mappings, disrupting how victim services are published.

Affected products

• dokploy: through 0.30.8

References

• https://github.com/Dokploy/dokploy
• https://github.com/Dokploy/dokploy/blob/v0.30.8/apps/dokploy/server/api/routers/port.ts#L17-L113
• https://github.com/Dokploy/dokploy/blob/v0.30.8/packages/server/src/services/permission.ts#L244-L261
• https://hackmd.io/@hieuPenguinnn/dokploy-port-router-cross-org-idor
• https://www.vulncheck.com/advisories/dokploy-through-0.30.8-cross-organization-authorization-bypass-via-port-trpc-router
• https://hackmd.io/@hieuPenguinnn/dokploy-port-router-cross-org-idor

Get alerted when CVE-2026-111331 or the next vulnerability affects your stack