CVE-2025-59156

🔥 A low-privileged user can hijack your entire server! This Remote Code Execution (RCE) vulnerability in Coolify’s deployment workflow could unleash chaos if not addressed immediately. ⚡ Think of it like a restaurant where a kitchen worker has access to the fridge but can also sneak in a secret recipe that bypasses all safety checks — they could create a dish that poisons the whole buffet! An attacker could exploit this vulnerability to run arbitrary commands on the host OS, gaining complete control and potentially wreaking havoc on your entire server environment. Your applications, databases, and sensitive data are all at risk, making this vulnerability absolutely devastating if left unpatched!

An attacker could exploit this vulnerability to run arbitrary commands on the host OS, gaining complete control and potentially wreaking havoc on your entire server environment. Your applications, databases, and sensitive data are all at risk, making this vulnerability absolutely devastating if left unpatched! Upgrade Coolify immediately to version 4.0.0-beta.420.7 to patch this vulnerability. Additionally, review the permissions of users allowed to create or update projects to minimize risks. Regularly audit your server configurations and Docker setups to ensure no malicious directives are lurking! You’ve got this! By following these steps, you’ll shore up your defenses and lock down your servers in no time. 🛡️