# CVE-2026-72739: Dokploy command injection via compose name

Source: https://junglewise.ai/threats/cve-2026-72739-dokploy-command-injection-via-compose-name  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-10. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-72739 · Severity: medium · CVSS 6.5 · Published 2026-08-10

Dokploy is a self-hosted platform-as-a-service (PaaS) system that deploys and manages applications using Docker. A vulnerability in versions before 0.29.13 allows attackers to execute arbitrary commands on the Docker host by deploying a malicious compose configuration with specially crafted names or service definitions that break out of the shell command being constructed.

Technologies: [Dokploy](https://junglewise.ai/threats/technologies/dokploy). Vendors: [Dokploy](https://junglewise.ai/threats/vendors/dokploy).

## Quick answers

**Is CVE-2026-72739 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-72739 being exploited in the wild.

**How severe is CVE-2026-72739?** Medium severity, with a CVSS score of 6.5, published 10 August 2026.

**Which products and versions are affected?** Dokploy before 0.29.13.

**Is there a fix for CVE-2026-72739?** A patch was published on 2026-07-19: Fix released in version 0.29.13 on July 21, 2026 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-72739 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-72739?** Check whether you run Dokploy at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a shell command injection flaw in the createCommand() function, which constructs docker compose commands by directly interpolating user-controlled compose service names and configuration values into bash command strings. An attacker can inject shell metacharacters (such as semicolons, pipes, or command substitution) into compose names or service definitions; when the malicious compose is deployed, these characters are interpreted as command separators rather than literal strings, allowing arbitrary command execution on the host running the Docker daemon. The vulnerability requires authentication and ability to deploy a compose application. The fix in version 0.29.13 applies proper shell escaping using the shell-quote library and validates custom compose commands to reject shell control characters.

## Affected products

- Dokploy Dokploy before 0.29.13

## Timeline

- 2026-08-10: disclosed
- 2026-07-19: patched: Fix released in version 0.29.13 on July 21, 2026

## References

- [https://github.com/Dokploy/dokploy/commit/d48037a80203bb0ecaec4f5653aef75fcfdb656d](https://github.com/Dokploy/dokploy/commit/d48037a80203bb0ecaec4f5653aef75fcfdb656d)
- [https://github.com/Dokploy/dokploy/releases/tag/v0.29.13](https://github.com/Dokploy/dokploy/releases/tag/v0.29.13)

## Related threats

- [Dokploy missing ownership check in application monitoring](https://junglewise.ai/threats/cve-2026-127212-dokploy-before-0-31-1-contains-a-missing-ownership-check)
- [Dokploy authorization bypass in application management](https://junglewise.ai/threats/cve-2026-116068-dokploy-through-0-30-10-contains-an-authorization-bypass)
- [Dokploy cross-organization authorization bypass in port router](https://junglewise.ai/threats/cve-2026-111331-dokploy-through-0-30-8-contains-a-cross-organization)
- [Dokploy OS command injection in patch repository read](https://junglewise.ai/threats/cve-2026-93425-dokploy-is-a-free-self-hostable-platform-as-a-service-paas-prior)
- [Dokploy credential disclosure in provider APIs](https://junglewise.ai/threats/cve-2026-86059-dokploy-is-a-free-self-hostable-platform-as-a-service-paas-prior)