Unrated severityNVD Advisory· Published Jul 7, 2025· Updated Jul 8, 2025
Dokploy allows attackers to read any file that the Traefik process user can access
CVE-2025-53375
Description
Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications and databases. An authenticated attacker can read any file that the Traefik process user can access (e.g., /etc/passwd, application source, environment variable files containing credentials and secrets). This may lead to full compromise of other services or lateral movement. This vulnerability is fixed in 0.23.7.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
2- github.com/Dokploy/dokploy/commit/e42f6bc61050cd438726921fced64477cbf8f8e6mitrex_refsource_MISC
- github.com/Dokploy/dokploy/security/advisories/GHSA-vq94-qm94-mxp6mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.