CVE-2026-43917— Dokploy 多tRPC端点越权访问漏洞
Possible ATT&CK Techniques 1AI
T1078.004 · Cloud Accounts新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-43917の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Dokploy: Cross-Organization IDOR - Multiple tRPC endpoints missing activeOrganizationId validation
ソース: NVD (National Vulnerability Database)
脆弱性説明
Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.19.0 and earlier, the protectedProcedure middleware only verifies the user is authenticated - it does NOT enforce organization scoping. Each endpoint must individually verify the resource's org matches the session's activeOrganizationId. This affects the following endpoints: allByType, killProcess, and removeDeployment in deployment.ts; delete in rollbacks.ts; create, one, update, remove, manualBackupPostgres, MySql, Mariadb, Mongo, Compose, WebServer, and listBackupFiles in backup.ts; list, one, delete, update, runManually, and restoreVolumeBackupWithLogs in volume-backups.ts; getNodes, removeWorker, addWorker, and addManager in cluster.ts; and create in mount.ts.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
通过用户控制密钥绕过授权机制
ソース: NVD (National Vulnerability Database)
影響を受ける製品
II. CVE-2026-43917の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-43917のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-43917 厂商安全公告 (1)
Same Patch Batch · Dokploy · 2026-05-29 · 10 CVEs total
| CVE-2026-45631 | 10.0 CRITICAL | Dokploy: Pre-Auth Admin Takeover via Hardcoded Authentication Secret |
| CVE-2026-45663 | 9.9 CRITICAL | Dokploy: Remote Code Execution via destinationPath in Container File Upload |
| CVE-2026-45629 | 9.9 CRITICAL | Dokploy: Authenticated Remote Code Execution via Command Injection in /listen-deployment W |
| CVE-2026-45632 | 9.9 CRITICAL | Dokploy: Schedule Authorization Bypass Enables Host/Server Command Execution |
| CVE-2026-45661 | 9.9 CRITICAL | Dokploy: Remote Code Execution through Path Traversal |
| CVE-2026-45633 | 9.9 CRITICAL | Dokploy: Command Injection in /docker-container-logs Endpoint |
| CVE-2026-45628 | 9.6 CRITICAL | Dokploy: Command Injection via Unescaped Branch Fields in Deployment Pipeline |
| CVE-2026-45630 | 9.0 CRITICAL | Dokploy: Authenticated Remote Code Execution via Command Injection in updateTraefikConfig |
| CVE-2026-45662 | 8.8 HIGH | Dokploy: Command Injection via incomplete shell escaping in docker logout (registry deleti |
IV. 関連脆弱性
同じ製品: dokploy
- CVE-2026-45629
Dokploy: Authenticated Remote Code Execution via Command Inj - CVE-2026-45628
Dokploy: Command Injection via Unescaped Branch Fields in De - CVE-2026-45630
Dokploy: Authenticated Remote Code Execution via Command Inj - CVE-2026-45631
Dokploy: Pre-Auth Admin Takeover via Hardcoded Authenticatio - CVE-2026-45632
Dokploy: Schedule Authorization Bypass Enables Host/Server C
同じベンダー: Dokploy
- CVE-2026-45629
Dokploy: Authenticated Remote Code Execution via Command Inj - CVE-2026-45628
Dokploy: Command Injection via Unescaped Branch Fields in De - CVE-2026-45630
Dokploy: Authenticated Remote Code Execution via Command Inj - CVE-2026-45631
Dokploy: Pre-Auth Admin Takeover via Hardcoded Authenticatio - CVE-2026-45632
Dokploy: Schedule Authorization Bypass Enables Host/Server C
同じ弱点: CWE-639
- CVE-2026-47266
Formie: Unauthenticated front-end submission editing can ove - CVE-2026-49386
JetBrains YouTrack低于2026.1.13570存在不当访问控制漏洞 - CVE-2026-9493
BankPro E-Service Technology｜Service Center - Insecure Direc - CVE-2026-45342
LinkAce: IDOR in Update Policies Allows Any Authenticated Us - CVE-2026-41141
EspoCRM: IDOR in EmailTemplate Prepare Endpoint Leaks Entity
V. CVE-2026-43917へのコメント
まだコメントはありません