CI/CD

In Dokploy versions up to and including 0.30.10 a high severity vulnerability CVE-2026-116068 was detected. This vulnerability allows an authenticated attacker, specifically an owner or admin of one organization, to bypass authorization controls and manipulate applications belonging to other tenants. This occurs within the Application tRPC Router, which fails to properly validate the ownership of […]

In Dokploy versions prior to 0.23.7 a medium severity vulnerability CVE-2025-53375 was detected. This vulnerability allows an authenticated attacker to read any file that the Traefik process user can access, including sensitive files such as /etc/passwd, application source code, and environment variable files containing credentials and secrets. This arbitrary file read flaw can potentially lead […]

In Dokploy versions up to and including 0.30.8 a medium severity vulnerability CVE-2026-111331 was detected. This vulnerability allows authenticated users with owner or admin roles in one organization to bypass authorization and manage ports belonging to other tenants. This occurs due to a cross-organization authorization bypass flaw within the port tRPC router. Because the target […]

In today’s fast-paced development environment, deploying and managing applications efficiently is essential for delivering value to users. Traditional Platform-as-a-Service (PaaS) solutions can be costly, restrictive, and tied to specific vendors. Dokploy offers a powerful, self-hosted alternative that gives developers and teams full control over their deployment pipelines without sacrificing simplicity or scalability. What is Dokploy? […]