CVE-2025-64420

🚨 Low-privileged users can see the root user’s private key in Coolify versions up to 4.0.0-beta.434—yikes! 🔥 Think of this like giving someone a master key to a restricted area in a hotel just because they showed up at the front desk. Once they have that key, they can waltz into the manager's suite without breaking a sweat! This is absolutely devastating! An attacker could log in as the root user, gaining unfettered access to everything on the server—from sensitive data to critical configurations. If this key falls into the wrong hands, it could lead to complete control over the system and potentially compromise all hosted applications.

This is absolutely devastating! An attacker could log in as the root user, gaining unfettered access to everything on the server—from sensitive data to critical configurations. If this key falls into the wrong hands, it could lead to complete control over the system and potentially compromise all hosted applications. To mitigate this risk, immediately upgrade to the latest version of Coolify once a patch is available, or restrict access rights to sensitive data. Regular audits of user permissions and configurations can also help catch these issues before they become a problem. You've got this! Stay vigilant and keep those servers secure! 🛡️