CVE-2025-53375

Description

Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications and databases. An authenticated attacker can read any file that the Traefik process user can access (e.g., /etc/passwd, application source, environment variable files containing credentials and secrets). This may lead to full compromise of other services or lateral movement. This vulnerability is fixed in 0.23.7.

PUBLISHED Reserved 2025-06-27 | Published 2025-07-07 | Updated 2025-07-08 | Assigner GitHub_M

Problem types

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Product status

References

github.com/...okploy/security/advisories/GHSA-vq94-qm94-mxp6

github.com/...ommit/e42f6bc61050cd438726921fced64477cbf8f8e6

cve.org (CVE-2025-53375)

nvd.nist.gov (CVE-2025-53375)

Download JSON