GHSA-2gq3-9q77-8hgv

The prefix field of a Backup (used to namespace backup files within an S3-compatible destination) is validated only as a non-empty string, with no restriction on shell metacharacters, and is interpolated directly into the rclone command line used to upload backups and to prune old ones. The value sits inside a double-quoted rclone argument (or, in the retention-cleanup path, with no quoting at all), so an authenticated organization member with permission to configure backups for a service can inject arbitrary shell commands that execute as root on the Dokploy host (or configured remote server) as soon as a backup runs - manually or on its schedule.

Field definition: packages/server/src/db/schema/backups.ts - prefix: text("prefix").notNull(), validated as z.string().min(1) with no character restriction (unlike branch-name fields elsewhere in the schema, which do carry a restrictive regex).