Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2025-64419 — AI Deep Analysis Summary

CVSS 9.7 · Critical

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: Coolify suffers from **Command Injection** due to improper sanitization of `docker-compose.yaml` parameters.…

Q2Root Cause? (CWE/Flaw)

🛡️ **Root Cause**: **CWE-77** (Command Injection). The flaw lies in **improper parameter cleaning** within the `docker-compose.yaml` configuration handling.…

Q3Who is affected? (Versions/Components)

📦 **Affected**: **Coolify** (by coollabsio). Specifically versions **prior to 4.0.0-beta.445**. If you are running an older beta or stable release, you are vulnerable.…

Q4What can hackers do? (Privileges/Data)

💀 **Hacker Capabilities**: Full **Command Execution** on the host. This grants **High Privileges** (often root/system level via Docker).…

Q5Is exploitation threshold high? (Auth/Config)

⚠️ **Exploitation Threshold**: **Low to Medium**. CVSS indicates **AV:N** (Network) and **AC:L** (Low Complexity). However, it requires **UI:R** (User Interaction) and **PR:N** (No Privileges Required).…

Q6Is there a public Exp? (PoC/Wild Exploitation)

🔍 **Public Exploit**: **No PoC provided** in the data. While the vulnerability is confirmed, there is no public Proof-of-Concept code or widespread wild exploitation reported yet. Stay vigilant! 🕵️‍♂️

Q7How to self-check? (Features/Scanning)

🔎 **Self-Check**: 1. Check your Coolify version (`< 4.0.0-beta.445`). 2. Review `docker-compose.yaml` inputs for unsanitized variables. 3. Monitor system logs for unexpected command executions. 4.…

Q8Is it fixed officially? (Patch/Mitigation)

✅ **Official Fix**: **Yes**. The vendor has released a fix. Update to **Coolify 4.0.0-beta.445** or later. 📝 **Commit**: See GitHub commit `f86ccfaa9af572a5487da8ea46b0a125a4854cf6` for the patch details.

Q9What if no patch? (Workaround)

🚧 **No Patch Workaround**: If you cannot update immediately: 1. **Restrict Access**: Limit UI access to trusted IPs. 2. **Input Validation**: Manually sanitize any user-supplied inputs passed to Docker Compose. 3.…

Q10Is it urgent? (Priority Suggestion)

🔥 **Urgency**: **HIGH**. CVSS Score is **Critical** (implied by C:H/I:H/A:H). Since it allows remote command execution with no auth required for the vector, patch immediately. Do not delay! ⏳