Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-64420

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions prior to and including v4.0.0-beta.434, low privileged users are able to see the private key of the root user on the Coolify instance. This allows them to ssh to the server and authenticate as root user, using the private key. As of time of publication, it is unclear if a patch is available.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:46e6c3fae390c38c9bf36260eb1c0d89ae617da839a3f23655a22ab8fbdf9a0c
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0

Affected products and versions

1 source assertion
{"product":"coolify","vendor":"coollabsio","versions":[{"status":"affected","version":"<= 4.0.0-beta.434"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:760ea7e5c34e9a6e9a752401bb390fbe50c61e7d57622f466e83076adff8b20f · sha256:f1dd88d3580935b8… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":10,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:760ea7e5c34e9a6e9a752401bb390fbe50c61e7d57622f466e83076adff8b20f · sha256:f1dd88d3580935b8… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-522","description":"CWE-522: Insufficiently Protected Credentials","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:760ea7e5c34e9a6e9a752401bb390fbe50c61e7d57622f466e83076adff8b20f · sha256:f1dd88d3580935b8… · /containers/cna/problemTypes/0/descriptions/0

Source references

1 source assertion
{"name":"https://github.com/coollabsio/coolify/security/advisories/GHSA-qwxj-qch7-whpc","tags":["x_refsource_CONFIRM"],"url":"https://github.com/coollabsio/coolify/security/advisories/GHSA-qwxj-qch7-whpc"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:760ea7e5c34e9a6e9a752401bb390fbe50c61e7d57622f466e83076adff8b20f · sha256:f1dd88d3580935b8… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer