Dokploy versions 0.29.8 and 0.29.11, along with a specific canary branch commit, contain a critical OS command injection vulnerability. This exploit occurs during backup creation and restoration processes due to improper sanitization of user input. The Dokploy application, which runs with root privileges by default, constructs shell commands using this unsanitized input. This allows authenticated users with backup permissions to inject malicious commands. These commands are then executed by the system's shell, granting attackers root-level access to the Dokploy host. Exploitation can lead to full compromise of the target device, including filesystem access and theft of credentials. The vulnerability affects all five database types supported by Dokploy. While Dokploy developers were unreachable, the issue has been fixed in versions 0.29.13 and later. Users are strongly advised to update to the patched versions immediately. As a mitigation, disabling default backup permissions and restricting them to only essential users is recommended for those unable to update. This vulnerability was reported by Muhammadjon Ahmadjonov.