Privilege Escalation Vulnerability in Coolify by Coollabs

CVE-2025-22611

Summary

Coolify, an open-source tool for managing servers and applications, has a vulnerability that allows authenticated users to escalate their privileges to any role, including the owner role. This flaw also permits the unauthorized removal of other team members, including admins. Consequently, attackers can exploit this vulnerability to access critical features like the Terminal, potentially executing arbitrary remote commands. The issue has been resolved in version 4.0.0-beta.361.

References