CVE-2026-111331— Dokploy through 0.30.8 Cross-Organization Authorization Bypass via port tRPC Router
Quick assessment
Affected
Dokploy Dokploy
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Dokploy 版本 0.30.8 及之前版本存在一个跨组织授权绕过漏洞，该漏洞位于 port tRPC 路由器中。由于系统从未验证目标应用程序所属的组织，任何组织的已认证所有者或管理员均可管理其他租户的端口。攻击者若向 port.create、port.one、port.update 或 port.delete 接口提供已知的 portId 或 applicationId，便可读取、修改、删除或新增端口映射关系，从而干扰受害者的服务发布行为。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-111331
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Dokploy through 0.30.8 Cross-Organization Authorization Bypass via port tRPC Router
Source: CVE Program / CVE List V5
Vulnerability Description
Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router that allows authenticated owners or admins of any organization to manage other tenants' ports because the target application's organization is never verified. Attackers supplying a known portId or applicationId to port.create, port.one, port.update, or port.delete can read, modify, delete, or add port mappings, disrupting how victim services are published.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
通过用户控制密钥绕过授权机制
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-111331
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-111331
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-111331 (2)
Vendor Advisories for CVE-2026-111331 (1)
Security Blog Posts for CVE-2026-111331 (1)
Vendor Pages for CVE-2026-111331 (1)
IV. Related Vulnerabilities
Same product: Dokploy
-
CVE-2026-93425
Dokploy: Authenticated OS Command Injection in patch.readRep -
CVE-2026-86059
Dokploy: Git Provider Credential Exposure via Unprotected .o -
CVE-2026-82954
Dokploy Settings application.ts writeTraefikConfigInPath pat -
CVE-2026-45791
Dokploy: Password Change Does Not Revoke Active Sessions -
CVE-2026-45790
Dokploy: Invitation Role Escalation Allows Organization Take
Same vendor: Dokploy
-
CVE-2026-93425
Dokploy: Authenticated OS Command Injection in patch.readRep -
CVE-2026-86059
Dokploy: Git Provider Credential Exposure via Unprotected .o -
CVE-2026-45791
Dokploy: Password Change Does Not Revoke Active Sessions -
CVE-2026-45790
Dokploy: Invitation Role Escalation Allows Organization Take -
CVE-2026-72902
Dokploy: Authenticated RCE via Command Injection in registry
Same weakness: CWE-639
-
CVE-2026-110901
WordPress SmartCrawl plugin <= 3.16.4 - Insecure Direct Obje -
CVE-2026-15219
IDOR in SFM Software's Costifier -
CVE-2026-103525
FluentCart A New Era of eCommerce <= 1.7.0 - Insecure Direct -
CVE-2026-89280
Dokan: AI Powered WooCommerce Multivendor Marketplace Soluti -
CVE-2026-111368
ClassroomIO through 1.0.0 IDOR via Course Submission Update,
V. Comments for CVE-2026-111331
No comments yet