High ยท published January 6, 2026
๐จ A crafty attacker can hijack password resets with just a malicious link! ๐ฅ Think of it like a thief sending a fake invitation to a party โ the victim unknowingly shows up at the wrong place, handing over access to their personal belongings! If an attacker successfully exploits this vulnerability, they could take complete control of a victim's account. This means changing passwords, accessing sensitive data, and wreaking havoc on their applications โ absolutely devastating!
Think of it like a thief sending a fake invitation to a party โ the victim unknowingly shows up at the wrong place, handing over access to their personal belongings! In Coolify versions up to v4.0.0-beta.434, attackers can manipulate the host header in password reset requests, tricking victims into clicking a link to a malicious server that captures their reset token.
If an attacker successfully exploits this vulnerability, they could take complete control of a victim's account. This means changing passwords, accessing sensitive data, and wreaking havoc on their applications โ absolutely devastating! Upgrade Coolify immediately to the latest version to mitigate this risk. Additionally, consider implementing security measures like validating host headers and educating users about suspicious links in emails. You've got this! With these steps, you'll protect your accounts and keep those online thieves at bay! ๐ฆธ
| Product | Versions | Fixed in |
|---|---|---|
| coollabs/coolify | < 4.0.0 | 4.0.0 |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |