CVE-2025-53376

Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications and databases. An authenticated, low-privileged user can run arbitrary OS commands on the Dokploy host. The tRPC procedure docker.getContainersByAppNameMatch interpolates the attacker-supplied appName value into a Docker CLI call without sanitisation, enabling command injection under the Dokploy service account. This vulnerability is fixed in 0.23.7.

• CWE-78

• https://github.com/Dokploy/dokploy/commit/fb5d2bd5b67322f1468e5e4d0d5abcf97517761cPatch
• https://github.com/Dokploy/dokploy/security/advisories/GHSA-m486-7pmj-8cmvPatch, Third Party Advisory

Published

Jul 7, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-53370Citizen is a MediaWiki skin that makes extensions part of th…5.4
• CVE-2025-53371DiscordNotifications is an extension for MediaWiki that send…9.1
• CVE-2025-53372node-code-sandbox-mcp is a Node.js–based Model Context Proto…7.5
• CVE-2025-53373Natours is a Tour Booking API. The attacker can easily take …8.9
• CVE-2025-53374Dokploy is a self-hostable Platform as a Service (PaaS) that…4.3
• CVE-2025-53375Dokploy is a self-hostable Platform as a Service (PaaS) that…6.5
• CVE-2025-53377WeGIA is a web manager for charitable institutions. A Reflec…6.1
• CVE-2025-53378A missing authentication vulnerability in Trend Micro Worry-…9.8
• CVE-2025-53379A out-of-bounds read vulnerability in Fortinet FortiAuthenti…7.5
• CVE-2025-5338The Royal Elementor Addons plugin for WordPress is vulnerabl…5.4
• CVE-2025-53380Rejected reason: Not used
• CVE-2025-53381Rejected reason: Not used