CVE-2025-64421— Coolify 安全漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2025-64421の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Coolify has a privilege escalation - low privileged user can invite themselves as an admin user
ソース: NVD (National Vulnerability Database)
脆弱性説明
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions up to and including v4.0.0-beta.434, a low privileged user (member) can invite a high privileged user. At first, the application will throw an error, but if the attacker clicks the invite button a second time, it actually works. This way, a low privileged user can invite themselves as an administrator to the Coolify instance. After the high privileged user is invited, the attacker can initiate a password reset and log in with the new admin. As of time of publication, it is unclear if a patch is available.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
授权机制不正确
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Coolify 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Coolify是coolLabs开源的一个开源和自托管的 Heroku/Netlify/Vercel 替代品。 Coolify v4.0.0-beta.434及之前版本存在安全漏洞，该漏洞源于低权限用户可邀请高权限用户，可能导致权限提升。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| coollabsio | coolify | <= 4.0.0-beta.434 | - |
II. CVE-2025-64421の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2025-64421のインテリジェンス情報
请登录查看更多情报信息。
Same Patch Batch · coollabsio · 2026-01-05 · 11 CVEs total
| CVE-2025-64420 | 10.0 CRITICAL | Coolify members can see private key of root user |
| CVE-2025-59157 | 10.0 CRITICAL | Coolify has Git Repository RCE |
| CVE-2025-64419 | 9.7 CRITICAL | Coolify vulnerable to command injection via docker-compose.yaml parameters |
| CVE-2025-64424 | Colify has command injection vulnerability in project git source | |
| CVE-2025-64423 | Coolify has a Privilege Escalation - low privileged users can see and use admin invitation | |
| CVE-2025-64422 | Rate-limit bypass on login via X-Forwarded-Host header | |
| CVE-2025-64425 | Coolify has host header injection in forgot password | |
| CVE-2025-59158 | Coolify has Stored XSS in Project Name | |
| CVE-2025-59156 | Coolify has Docker Compose Injection issue | |
| CVE-2025-59955 | Coolify leaksensitive information `email_change_code` in `/api/v1/teams/{team_id | current |
IV. 関連脆弱性
同じ製品: coolify
- CVE-2025-64425
Coolify has host header injection in forgot password - CVE-2025-64424
Colify has command injection vulnerability in project git so - CVE-2025-64423
Coolify has a Privilege Escalation - low privileged users ca - CVE-2025-64422
Rate-limit bypass on login via X-Forwarded-Host header - CVE-2025-64420
Coolify members can see private key of root user
同じベンダー: coollabsio
- CVE-2025-64425
Coolify has host header injection in forgot password - CVE-2025-64424
Colify has command injection vulnerability in project git so - CVE-2025-64423
Coolify has a Privilege Escalation - low privileged users ca - CVE-2025-64422
Rate-limit bypass on login via X-Forwarded-Host header - CVE-2025-64420
Coolify members can see private key of root user
同じ弱点: CWE-863
- CVE-2026-42571
Privilege Escalation Attack affecting Pelican Web UI - CVE-2025-15633
HCL BigFix WebUI is affected by an improper authorization vu - CVE-2026-42296
Argo Workflows has incomplete fix for CVE-2026-31892: hostNe - CVE-2025-66170
Apache CloudStack: Any user can list backups that they shoul - CVE-2026-41903
FreeScout IDOR Vulnerability: PERM_EDIT_USERS allows modifyi
V. CVE-2025-64421へのコメント
まだコメントはありません