dokploy vulnerabilities and fixes

Recent CVEs affecting dokploy, with upgrade or downgrade steps. 7 tracked.

dokploy has 7 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 7. Most recent: 2026-01-28. Highest priority: CVE-2026-24841 (score 61/100).

• CVE-2025-53375 MEDIUM 6.5 UPGRADE Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of appli
• CVE-2026-24841 CRITICAL 9.9 UPGRADE Dokploy is a free, self-hostable Platform as a Service (PaaS)
• CVE-2026-24840 HIGH 8.0 UPGRADE Dokploy is a free, self-hostable Platform as a Service (PaaS)
• CVE-2026-24839 MEDIUM 4.7 UPGRADE Dokploy is a free, self-hostable Platform as a Service (PaaS)
• CVE-2025-53825 CRITICAL 9.4 UPGRADE Dokploy is a free, self-hostable Platform as a Service (PaaS)
• CVE-2025-53376 HIGH 8.8 UPGRADE Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of appli
• CVE-2025-53374 MEDIUM 4.3 UPGRADE Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of appli

FAQ

How do I fix dokploy vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is dokploy being exploited right now?

None of the tracked dokploy CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which dokploy CVE should I patch first?

CVE-2026-24841 currently ranks highest (61/100): Dokploy is a free, self-hostable Platform as a Service (PaaS).

RSS feed for dokploy · ← Back to latest CVEs