Privilege Escalation Vulnerability in Coolify by Coollabs

CVE-2025-64423

What is CVE-2025-64423?

Coolify, an open-source tool used for managing servers, applications, and databases, has a vulnerability that affects versions up to and including v4.0.0-beta.434. The issue allows low privileged users to view and utilize invitation links intended for administrators. If these links are used by unauthorized users before being accessed by the intended recipient, the attackers can gain unauthorized administrator access. This represents a significant risk, as it enables privilege escalation that could compromise the security of the system. At the time of this report, it remains unclear if a patch has been released to address this issue.

References