A vulnerability classified as critical has been found in dokploy up to 0.29.2. This affects an unknown function. The manipulation of the argument BETTER_AUTH_SECRET leads to hard-coded credentials.
This vulnerability is documented as CVE-2026-45631. The attack can be initiated remotely. There is not any exploit available.
It is recommended to upgrade the affected component.