Privilege Escalation Vulnerability in Coolify by Coollabs

CVE-2025-64423

What is CVE-2025-64423?

Coolify, an open-source tool used for managing servers, applications, and databases, has a vulnerability that affects versions up to and including v4.0.0-beta.434. The issue allows low privileged users to view and utilize invitation links intended for administrators. If these links are used by unauthorized users before being accessed by the intended recipient, the attackers can gain unauthorized administrator access. This represents a significant risk, as it enables privilege escalation that could compromise the security of the system. At the time of this report, it remains unclear if a patch has been released to address this issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References