CVE-2025-64419

🚨 A simple line in a docker-compose.yaml file could let an attacker take control of your Coolify instance as root! 🔥 Think of it like a restaurant where the chef starts cooking without checking the ingredients — if someone sneaks in a toxic spice, the whole meal becomes a risk! This vulnerability allows malicious commands to be executed on your server, leading to potential disaster. An attacker could run any command they desire on your server, essentially taking complete control over your entire Coolify application. This means they could access sensitive data, modify your server settings, or even launch further attacks, making it an absolute nightmare for your operations.

An attacker could run any command they desire on your server, essentially taking complete control over your entire Coolify application. This means they could access sensitive data, modify your server settings, or even launch further attacks, making it an absolute nightmare for your operations. Immediately upgrade your Coolify instance to version 4.0.0-beta.445 or later to patch this critical flaw. Review your docker-compose.yaml files to ensure no malicious inputs are included. It’s also wise to audit your application creation procedures to limit exposure to untrusted repositories. Security hero status: activated! You've got this — stay proactive and keep your Coolify instance safe! 🛡️