PT-2025-4598 · Coolify · Coolify

Angelej · Published 2025-01-24 · Updated 2025-02-05 · CVE-2025-22612

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Coolify versions prior to 4.0.0-beta.374

Description The issue allows an authenticated user to retrieve any existing private keys on a Coolify instance in plain text due to missing authorization. If the server configuration of IP/domain, port, and user matches with the victim's server configuration, the attacker can execute arbitrary commands on the remote server.

Recommendations Coolify versions prior to 4.0.0-beta.374 should be updated to version 4.0.0-beta.374 to fix the issue.

Exploit

Fix

Missing Authorization

Information Disclosure

Weakness Enumeration

CWE-862

CWE-200

Related Identifiers

CVE-2025-22612

GHSA-WG8X-CGQ4-VJXJ

Affected Products

Coolify

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/22xxx/CVE-2025-22612.json · Exploit
• https://github.com/coollabsio/coolify/security/advisories/GHSA-wg8x-cgq4-vjxj · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-22612 · Security Note
• https://osv.dev/vulnerability/CVE-2025-22612 · Vendor Advisory
• https://twitter.com/angelej_dev/status/1885454205952934175 · Twitter Post
• https://twitter.com/CveFindCom/status/1882836599622230108 · Twitter Post
• https://twitter.com/TMJIntel/status/1885007316677718085 · Twitter Post
• https://t.me/cvedetector/16310 · Telegram Post
• https://t.me/pentestingnews/55801 · Telegram Post
• https://twitter.com/the_yellow_fall/status/1884437157487730950 · Twitter Post
• https://twitter.com/Brandefense/status/1887033521060913492 · Twitter Post
• https://twitter.com/Dinosn/status/1884916072052031836 · Twitter Post
• https://twitter.com/CVEnew/status/1882833368544338111 · Twitter Post
• https://twitter.com/gothburz/status/1884957399833825307 · Twitter Post