CVE-2025-53375

Dokploy (PaaS) is affected by CVE-2025-53375. An authenticated attacker can read any file accessible to the Traefik process user (e.g., /etc/passwd, app sources, env files with credentials), risking full service compromise or lateral movement. Affected versions are prior to 0.23.7; remediation is...

CVE-2025-53375 Dokploy allows attackers to read any file that the Traefik process user can access

Dokploy is a self-hostable Platform as a Service PaaS that simplifies the deployment and management of applications and databases. An authenticated attacker can read any file that the Traefik process user can access e.g., /etc/passwd, application source, environment variable files containing...

CVE-2025-53376 Dokploy allows attackers to run arbitrary OS commands on the Dokploy host.

Dokploy is a self-hostable Platform as a Service PaaS that simplifies the deployment and management of applications and databases. An authenticated, low-privileged user can run arbitrary OS commands on the Dokploy host. The tRPC procedure docker.getContainersByAppNameMatch interpolates the...

CVE-2025-53376 Dokploy allows attackers to run arbitrary OS commands on the Dokploy host.

Dokploy is a self-hostable Platform as a Service PaaS that simplifies the deployment and management of applications and databases. An authenticated, low-privileged user can run arbitrary OS commands on the Dokploy host. The tRPC procedure docker.getContainersByAppNameMatch interpolates the...

CVE-2025-53376

Dokploy is a self-hosted PaaS where an authenticated, low-privileged user can execute arbitrary OS commands on the host via the tRPC procedure docker.getContainersByAppNameMatch, which interpolates an attacker-controlled appName into a Docker CLI call without sanitisation. The root cause is unsan...

CVE-2025-53376 Dokploy allows attackers to run arbitrary OS commands on the Dokploy host.

Dokploy is a self-hostable Platform as a Service PaaS that simplifies the deployment and management of applications and databases. An authenticated, low-privileged user can run arbitrary OS commands on the Dokploy host. The tRPC procedure docker.getContainersByAppNameMatch interpolates the...

CVE-2025-53374 Dokploy Improperly Discloses User Information via user.one Endpoint

Dokploy is a self-hostable Platform as a Service PaaS that simplifies the deployment and management of applications and databases. An authenticated low-privileged account can retrieve detailed profile information about another users in the same organization by directly invoking user.one. The...

Dokploy 操作系统命令注入漏洞

Dokploy is an open source software from Dokploy Open Source. An operating system command injection vulnerability exists in Dokploy versions prior to 0.23.7. The vulnerability stems from the fact that an authenticated, low-privileged user can run arbitrary OS commands on a Dokploy host, which coul...

PT-2025-28202 · Dokploy · Dokploy

Name of the Vulnerable Software and Affected Versions: Dokploy versions prior to 0.23.7 Description: Dokploy is a self-hostable Platform as a Service PaaS that simplifies the deployment and management of applications and databases. An authenticated low-privileged account can retrieve detailed...

PT-2025-28203 · Dokploy · Dokploy

Name of the Vulnerable Software and Affected Versions: Dokploy versions prior to 0.23.7 Description: Dokploy is a self-hostable Platform as a Service PaaS that simplifies the deployment and management of applications and databases. An authenticated attacker can read any file that the Traefik...

Dokploy 安全漏洞

Dokploy is an open source software from Dokploy Open Source. A security vulnerability exists in Dokploy versions prior to 0.23.7, which stems from a low-privileged account being able to retrieve other users' details, potentially leading to information disclosure...

Dokploy 路径遍历漏洞

Dokploy is an open source software from Dokploy Open Source. A path traversal vulnerability exists in Dokploy versions prior to 0.23.7, which originates from an authenticated attacker being able to read any file accessible to a user of the Traefik process, potentially leading to the complete...