GHSA-9889-w3j8-rm22

Dokploy is multi-tenant: any authenticated user can self-service create additional organizations via organization.create, and Dokploy Cloud specifically runs many unrelated paying customers on the same shared instance. The shared authorization helpers that most routers rely on for access control (checkServicePermissionAndAccess, checkProjectAccess, checkEnvironmentAccess in packages/server/src/services/permission.ts) skip their per-resource membership check entirely for owner and admin roles, and none of them verify that the resource being referenced actually belongs to the caller's currently active organization at all. For non-owner/admin members this is incidentally safe, because the membership arrays they check are only ever populated with resources from the member's own organization.