Goal Reached Thanks to every supporter โ€” we hit 100%!

Goal: 1000 CNY ยท Raised: 1336 CNY

100%

CVE-2025-22611 โ€” AI Deep Analysis Summary

CVSS 10.0 ยท Critical

Q1What is this vulnerability? (Essence + Consequences)

๐Ÿšจ **Essence**: Coolify < 4.0.0-beta.361 has a critical **Authorization Bypass**. ๐Ÿ“‰ **Consequences**: Attackers can escalate privileges to **Owner** level, gaining full control over the platform and all hosted resources.โ€ฆ

Q2Root Cause? (CWE/Flaw)

๐Ÿ›ก๏ธ **CWE**: **CWE-862** (Missing Authorization). ๐Ÿ” **Flaw**: The application fails to verify if a user has the right permissions before executing actions.โ€ฆ

Q3Who is affected? (Versions/Components)

๐Ÿ“ฆ **Vendor**: coollabsio. ๐Ÿ“ฆ **Product**: Coolify. ๐Ÿ“‰ **Affected Versions**: All versions **before 4.0.0-beta.361**. โœ… **Fixed In**: Version 4.0.0-beta.361 and later.

Q4What can hackers do? (Privileges/Data)

๐Ÿ‘‘ **Privileges**: Escalate from any role to **Owner**. ๐Ÿ“‚ **Data Access**: Full read/write access to all projects, servers, and configurations.โ€ฆ

Q5Is exploitation threshold high? (Auth/Config)

โš ๏ธ **Threshold**: **Low**. ๐Ÿšช **Auth Required**: Yes, the attacker must be an **authenticated user**. ๐Ÿšซ **No Auth Bypass**: Does not require anonymous access. ๐ŸŽฏ **Ease**: **Low Complexity (AC:L)**.โ€ฆ

Q6Is there a public Exp? (PoC/Wild Exploitation)

๐Ÿšซ **Public Exploit**: **No**. ๐Ÿ“ **PoC**: None listed in the advisory. ๐ŸŒ **Wild Exploitation**: Unconfirmed. However, the logic flaw is simple, so PoCs may emerge quickly.โ€ฆ

Q7How to self-check? (Features/Scanning)

๐Ÿ” **Check**: Verify your Coolify version in the dashboard. ๐Ÿ“… **Date**: Published 2025-01-24. ๐Ÿ› ๏ธ **Scan**: Look for version **< 4.0.0-beta.361**.โ€ฆ

Q8Is it fixed officially? (Patch/Mitigation)

โœ… **Fixed**: **Yes**. ๐Ÿ“ฆ **Patch**: Upgrade to **Coolify 4.0.0-beta.361** or newer. ๐Ÿ”— **Source**: Official GitHub Security Advisory (GHSA-9w72-9qww-qj6g). ๐Ÿ”„ **Action**: Immediate update recommended for all beta users.

Q9What if no patch? (Workaround)

๐Ÿ›ก๏ธ **Workaround**: If you cannot update immediately, **restrict user creation**. ๐Ÿ‘ฅ **Limit Access**: Only allow trusted admins. ๐Ÿ”’ **Network**: Isolate the Coolify instance from untrusted networks.โ€ฆ

Q10Is it urgent? (Priority Suggestion)

๐Ÿ”ฅ **Urgency**: **CRITICAL**. ๐Ÿšจ **Priority**: **P1**. โšก **Reason**: CVSS Vector shows **High** impact (C:H, I:H, A:H) and **Low** complexity. ๐Ÿ“ข **Action**: Patch immediately. This allows any user to become the owner.โ€ฆ