In Dokploy versions prior to 0.23.7 a medium severity vulnerability CVE-2025-53375 was detected. This vulnerability allows an authenticated attacker to read any file that the Traefik process user can access, including sensitive files such as /etc/passwd, application source code, and environment variable files containing credentials and secrets. This arbitrary file read flaw can potentially lead to the full compromise of other hosted services or facilitate lateral movement within the environment. To address this issue, users should upgrade Dokploy to version 0.23.7 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-53375.
Dokploy: Arbitrary File Read via Traefik Process User
by the Hossted team
20.10.2026