CVE-2026-45791— Dokploy: Password Change Does Not Revoke Active Sessions
Possible ATT&CK Techniques 1AI
T1078 · Valid AccountsGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-45791
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Dokploy: Password Change Does Not Revoke Active Sessions
Source: CVE Program / CVE List V5
Vulnerability Description
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.6, Dokploy's user.update procedure in apps/dokploy/server/api/routers/user.ts updates account.password without deleting other rows from session, allowing a compromised better-auth.session_token session to remain valid for up to three days after a password change. This issue is fixed in version 0.29.6.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
不充分的会话过期机制
Source: CVE Program / CVE List V5
Vulnerability Title
Dokploy 会话机制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Dokploy是Dokploy团队开源的一款集持续集成与交付于一体的云计算部署平台。 Dokploy 0.29.6之前版本存在会话机制问题漏洞，该漏洞源于更新用户密码时未删除会话表中的其他记录，导致已被入侵的better-auth会话令牌在密码更改后仍保持有效。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-45791
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-45791
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-45791 (1)
Vendor Advisories for CVE-2026-45791 (1)
IV. Related Vulnerabilities
Same product: dokploy
- CVE-2026-45790
Dokploy: Invitation Role Escalation Allows Organization Take - CVE-2026-72902
Dokploy: Authenticated RCE via Command Injection in registry - CVE-2026-72901
Dokploy: Remote Code Execution via volume-backup - CVE-2026-72886
Dokploy: Non-admin member gains root on the host by bypassin - CVE-2026-72885
Dokploy: Authenticated Command Injection in Dokploy Dockerfi
Same vendor: Dokploy
- CVE-2026-45790
Dokploy: Invitation Role Escalation Allows Organization Take - CVE-2026-72902
Dokploy: Authenticated RCE via Command Injection in registry - CVE-2026-72901
Dokploy: Remote Code Execution via volume-backup - CVE-2026-72886
Dokploy: Non-admin member gains root on the host by bypassin - CVE-2026-72885
Dokploy: Authenticated Command Injection in Dokploy Dockerfi
Same weakness: CWE-613
- CVE-2026-14950
Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnera - CVE-2026-65984
FUXA: JWT lifecycle flaws allow deleted or demoted users to - CVE-2026-73611
File Browser 2.50.0 through 2.63.21 JWT Expiration Bypass - CVE-2026-66376
Deleted users may temporarily retain access to JFrog Artifac - CVE-2026-17600
Nexus Repository 3 - Session Not Invalidated on User Account
V. Comments for CVE-2026-45791
No comments yet