CVE-2025-64423

⚡ A low-privileged user can leapfrogging into an admin account simply by using an invitation link first. Talk about a sneaky shortcut! 😮 Think of it like a restaurant where a waiter accidentally hands over an invite to a VIP table. If they slip in before the actual VIP arrives, they can order whatever they want, and no one will notice until it’s too late! This means an unauthorized user could gain admin-level access, potentially leading to data exposure or unauthorized changes across the system. Imagine the chaos when a member suddenly has the keys to the kingdom!

This means an unauthorized user could gain admin-level access, potentially leading to data exposure or unauthorized changes across the system. Imagine the chaos when a member suddenly has the keys to the kingdom! To remediate, ensure you upgrade to the latest version of Coolify once a patch is released. In the meantime, restrict access to invitation links and review your user permissions to prevent privilege escalation. You've got this! Stay vigilant and keep your environment secure. 🛡️