UpHeron
All vulnerabilities

Servers and applications

CVE-2025-53375

An authenticated attacker can read any file that the Traefik process user can access (e.g., /etc/passwd

Severity
Medium 4.9
Published
5 Jul 2025
Last changed
19 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
0.23.6, 0.23.7
Also known as
GHSA-vq94-qm94-mxp6
Sources
NVD, Project advisories (GitHub)

Description

Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications and databases. An authenticated attacker can read any file that the Traefik process user can access (e.g., /etc/passwd, application source, environment variable files containing credentials and secrets). This may lead to full compromise of other services or lateral movement. This…

Affected software

SoftwareAffected versions
DokployServers and applications · cpe:a:dokploy:dokploy
  • Every version before 0.23.7
DokployServers and applications · github:dokploy/dokploy
  • Every version before 0.23.6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-53375
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-53375
  • GitHub Advisory Database https://github.com/advisories/GHSA-vq94-qm94-mxp6
  • github.com https://github.com/Dokploy/dokploy/security/advisories/GHSA-vq94-qm94-mxp6