CVE-2025-64419 | Coolify vulnerable to command injection via docker-compose.yaml parameters

Exp

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.445, parameters coming from docker-compose.yaml are not sanitized when used in commands. If a victim user creates an application from an attacker repository (using build pack "docker compose"), the attacker can execute commands on the Coolify instance as root. Version 4.0.0-beta.445 fixes the issue.

Published: 2026-01-05 Last update: 2026-01-12 Assigner: [email protected] Source: [email protected]
NVD Status：Analyzed，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2025-64419 is rated High Exploit Risk (69.6/100): CVSS Critical severity, with low exploitation likelihood (EPSS 0.62%). 1 public exploit reference(s) are indexed (Exploit-DB). Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Public exploit references (Exploit-DB) for CVE-2025-64419

EDB-ID Source Kind Published Link
— nvd_ref exploit_tag Exploit-DB ↗

Exploit prediction scoring system (EPSS) score for CVE-2025-64419

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 0.09% 0.62% +0.53%
2 2026-06-03 0.15% 0.09% -0.06%
3 2026-05-07 — 0.15% —

Full EPSS history (4 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2025-64419

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
9.6 3.1 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Click to expand
Attack vector (AV:N)
Could be attacked over the internet or any normal routed network—not just someone sitting at the machine.
Attack complexity (AC:L)
Once they can reach the bug, pulling it off is straightforward—no weird race conditions or rare setup.
Privileges required (PR:N)
No account or special rights needed—anonymous or random user is enough.
User interaction (UI:R)
A real person has to do something—click, install, enable—otherwise it doesn’t land.
Scope (S:C)
Breaking this can reach past the original component and bite other resources—bigger blast radius.
Confidentiality (C:H)
Serious risk that confidential data gets exposed in a big way.
Integrity (I:H)
They could widely tamper with or forge data—trust in the data is badly hurt.
Availability (A:H)
Could take the service down hard or make it unusable for people who depend on it.
 2.8 6.0 [email protected]
8.8 3.1 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Click to expand
Attack vector (AV:N)
Could be attacked over the internet or any normal routed network—not just someone sitting at the machine.
Attack complexity (AC:L)
Once they can reach the bug, pulling it off is straightforward—no weird race conditions or rare setup.
Privileges required (PR:N)
No account or special rights needed—anonymous or random user is enough.
User interaction (UI:R)
A real person has to do something—click, install, enable—otherwise it doesn’t land.
Scope (S:U)
Damage stays in the same “trust bubble” as the broken component—no big spill into unrelated systems.
Confidentiality (C:H)
Serious risk that confidential data gets exposed in a big way.
Integrity (I:H)
They could widely tamper with or forge data—trust in the data is badly hurt.
Availability (A:H)
Could take the service down hard or make it unusable for people who depend on it.
 2.8 5.9 [email protected]

Weakness enumeration for CVE-2025-64419

Affected software / configurations for CVE-2025-64419

Vendor Product Version Raw CPE
coollabs coolify < 4.0.0 cpe:2.3:a:coollabs:coolify:*:*:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta100:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta101:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta102:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta103:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta104:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta105:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta106:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta107:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta108:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta109:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta110:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta111:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta112:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta113:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta114:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta115:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta116:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta117:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta118:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta119:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta120:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta121:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta122:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta123:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta124:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta125:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta126:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta127:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta128:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta129:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta130:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta131:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta132:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta133:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta134:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta135:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta136:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta137:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta138:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta139:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta140:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta141:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta142:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta143:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta144:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta145:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta146:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta147:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta148:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta149:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta150:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta151:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta152:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta153:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta154:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta155:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta156:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta157:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta158:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta159:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta160:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta161:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta162:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta163:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta164:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta165:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta166:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta167:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta168:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta169:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta170:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta171:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta172:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta173:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta174:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta175:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta176:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta177:*:*:*:*:*:*
coollabs coolify 4.0.0 cpe:2.3:a:coollabs:coolify:4.0.0:beta178:*:*:*:*:*:*

References for CVE-2025-64419

cvelogic Threat Intelligence