CVE-2025-64425

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions up to and including v4.0.0-beta.434, an attacker can initiate a password reset for a victim, and modify the host header of the request to a malicious value. The victim will receive a password reset email, with a link to the malicious host. If the victim clicks this link, their reset token is sent to the attacker's server, allowing the attacker to use it to change the victim's password and takeover their account. As of time of publication, it is unclear if a patch is available.

• CWE-644

• https://drive.google.com/file/d/1I5sJHcpetJbKlwVS2usAD7qmgH37Y4rw/view?usp=drive_linkPermissions Required
• https://github.com/coollabsio/coolify/security/advisories/GHSA-f737-2p93-g2cwExploit, Vendor Advisory
• https://github.com/coollabsio/coolify/security/advisories/GHSA-f737-2p93-g2cwExploit, Vendor Advisory

Published

Jan 5, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-6442Ruby WEBrick read_header HTTP Request Smuggling Vulnerabilit…5.9
• CVE-2025-64420Coolify is an open-source and self-hostable tool for managin…8.8
• CVE-2025-64421Coolify is an open-source and self-hostable tool for managin…8
• CVE-2025-64422Coolify is an open-source and self-hostable tool for managin…4.3
• CVE-2025-64423Coolify is an open-source and self-hostable tool for managin…8.8
• CVE-2025-64424Coolify is an open-source and self-hostable tool for managin…8.8
• CVE-2025-64427ZimaOS is a fork of CasaOS, an operating system for Zima dev…6.5
• CVE-2025-64428Dataease is an open source data visualization analysis tool.…9.8
• CVE-2025-64429DuckDB is a SQL database management system. DuckDB implement…6.5
• CVE-2025-6443Mikrotik RouterOS VXLAN Source IP Improper Access Control Vu…7.2
• CVE-2025-64430Parse Server is an open source backend that can be deployed …7.5
• CVE-2025-64431Zitadel is an open source identity management platform. Vers…8.7