Dokploy through 0.30.10 Cross-Organization Authorization Bypass via Application tRPC Router

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-116068 · Microsoft / collected KEV context

cve-program · CVE-2026-116068

• https://github.com/Dokploy/dokploy/issues/5635
• https://github.com/Dokploy/dokploy
• https://github.com/Dokploy/dokploy/blob/073713f0b863eca4285ad24db00550af1b39397a/packages/server/src/services/permission.ts#L244-L261
• https://github.com/Dokploy/dokploy/blob/073713f0b863eca4285ad24db00550af1b39397a/apps/dokploy/server/api/routers/application.ts#L490-L501
• https://github.com/Dokploy/dokploy/commit/b3cd3c5061b9e4f9a786dc4a048765f79bae2523
• https://www.vulncheck.com/advisories/dokploy-through-0.30.10-cross-organization-authorization-bypass-via-application-trpc-router

• Dokploy through 0.30.10 Cross-Organization Authorization Bypass via Application tRPC Router · Newly collected advisory · 25 Oct 2026