Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Dokku is a docker-powered PaaS. Prior to 0.38.7, the cron plugin utilizes commands in the app.json file to manage system cron running as the Dokku user. An app.json cron command utilizing special shell characters - including, but not limited to, > or ; - can break out of the Docker container and execute commands on the host as the Dokku user. This vulnerability is fixed in 0.38.7.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-26 | 2 | Disclosure1Patch1 |
| 2026-06-28 | 1 | Patch1 |
🚨 CVE-2026-54636 — CVSS 9/10 █████████░ Dokku is a docker-powered PaaS. Prior to 0.38.7, the cron plugin utilizes commands in the app.json file to manage... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/weIesaB5cC
Post summary
The tweet announces a critical CVE in Dokku’s cron plugin and urges users to patch to version 0.38.7, with no PoC or exploitation details provided.
#CVE-2026-54636 - Critical OS Command Injection in #Dokku. #App.json cron commands with shell chars can break container isolation. #CVSS 9.0. Update to 0.38.7. @dokku #infosec #cybersecurity #devsecops #devops #developers #git #github #gitlab More: https://www.valtersit.com/cve/CVE-2026-54636
Post summary
CVE‑2026‑54636 is a critical OS command injection in Dokku (CVSS 9.0) that breaks container isolation, with a fix released in version 0.38.7.
CVE-2026-54636 Command Injection in Dokku Cron Plugin Versions Before 0.38.7 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-54636
Post summary
CVE-2026-54636 is a reported command injection vulnerability in Dokku Cron Plugin versions prior to 0.38.7, with basic disclosure details but no PoC, exploit, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | dokku | dokku | - | - | - |