Dokploy through 0.30.8 Cross-Organization Authorization Bypass via port tRPC Router

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-111331 · Microsoft / collected KEV context

cve-program · CVE-2026-111331

• https://hackmd.io/@hieuPenguinnn/dokploy-port-router-cross-org-idor
• https://github.com/Dokploy/dokploy/blob/v0.30.8/apps/dokploy/server/api/routers/port.ts#L17-L113
• https://github.com/Dokploy/dokploy/blob/v0.30.8/packages/server/src/services/permission.ts#L244-L261
• https://github.com/Dokploy/dokploy
• https://www.vulncheck.com/advisories/dokploy-through-0.30.8-cross-organization-authorization-bypass-via-port-trpc-router

No related operational record is retained in the current change model.