CVE-2026-45630 affects Dokploy, a free self-hostable Platform as a Service (PaaS) solution. The vulnerability exists in versions 0.28.8 and earlier, specifically in the application.updateTraefikConfig tRPC endpoint. Authenticated admin/owner users can exploit this OS command injection flaw to execute arbitrary system commands on remote servers. The vulnerability stems from unsanitized echo shell interpolation, allowing attackers with elevated privileges to gain unauthorized command execution capabilities on the affected systems.