CVE-2025-53375: Dokploy

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications and databases. An authenticated attacker can read any file that the Traefik process user can access (e.g., /etc/passwd, application source, environment variable files containing credentials and secrets). This may lead to full compromise of other services or lateral movement. This vulnerability is fixed in 0.23.7.

Affected products

• Dokploy Dokploy: before 0.23.7 (fixed in 0.23.7)

Published 2025-07-07. Last modified 2026-06-17.