CVE-2025-66209

🚨 An authenticated user with management permissions can execute arbitrary commands on your server—think about that for a second! 🔥 Imagine a restaurant where the chef can cook anything they like just by naming the dish—but what if they can throw in some secret ingredients without anyone checking the menu? That's essentially what's happening here with database names feeding straight into shell commands without a filter! This flaw enables a malicious user to gain root access on managed servers, potentially leading to catastrophic data loss, unauthorized data manipulation, or even total server control. It's like giving a would-be thief the keys to your entire restaurant—dangerously easy and absolutely devastating!

This flaw enables a malicious user to gain root access on managed servers, potentially leading to catastrophic data loss, unauthorized data manipulation, or even total server control. It's like giving a would-be thief the keys to your entire restaurant—dangerously easy and absolutely devastating! Upgrade Coolify to version 4.0.0-beta.451 immediately to patch this serious vulnerability. Additionally, review user permissions to ensure only trusted personnel have application/service management rights. Implement command sanitization practices in your applications for extra security. You've got this! With these steps, you can lock down your server and keep the bad guys out. 🛡️