CVE-2025-66210

🚨 An authenticated user can send arbitrary commands straight to the server! With a command injection vulnerability in Coolify, managing your databases could become a dangerous game. 🔥 Think of it like a waiter who takes orders without checking if the ingredients are safe. The database names here are the orders, and if the chef can cook anything without restrictions, chaos can ensue! This vulnerability allows a malicious user with just the right permissions to execute commands as root on your managed server. Imagine the devastation: a rogue actor could wipe databases, alter configurations, or install malicious software—all without breaking a sweat!

This vulnerability allows a malicious user with just the right permissions to execute commands as root on your managed server. Imagine the devastation: a rogue actor could wipe databases, alter configurations, or install malicious software—all without breaking a sweat! Upgrade to version 4.0.0-beta.451 immediately to close this dangerous loophole. Additionally, review user permissions and ensure that only trusted users can manage database imports. Don't forget to perform security audits regularly! You've got this! Fixing this flaw will bolster your defenses and keep your data safe. 🛡️