Privilege Escalation Vulnerability in Coolify Open-Source Tool

CVE-2025-64421

What is CVE-2025-64421?

An issue has been identified in Coolify, an open-source server management tool, where a low privileged user can exploit a flaw to invite themselves as a high privileged user. Initially, the tool presents an error upon invitation. However, if the user attempts to invite again, the process succeeds, allowing the low privileged user to obtain admin status. Following this, the attacker can request a password reset to gain unauthorized access as an administrator. As of the latest updates, it's still uncertain whether a patch has been released to address this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References