CVE-2025-53375 Information

Description

Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications and databases. An authenticated attacker can read any file that the Traefik process user can access (e.g. /etc/passwd application source environment variable files containing credentials and secrets). This may lead to full compromise of other services or lateral movement. This vulnerability is fixed in 0.23.7.

Reference

https://github.com/Dokploy/dokploy/commit/e42f6bc61050cd438726921fced64477cbf8f8e6 https://github.com/Dokploy/dokploy/security/advisories/GHSA-vq94-qm94-mxp6

Related CNNVD

CNNVD-202507-721 (Published: 2025-07-07)