Critical Vulnerabilities in Coolify: Implications for North East India and Beyond

Cybersecurity researchers have recently disclosed a series of critical-severity vulnerabilities in Coolify, an open-source self-hosting platform. These flaws, affecting versions up to 4.0.0-beta.4XX, could potentially lead to authentication bypass, remote code execution, and server compromise.

Command Injection Vulnerabilities

The most severe vulnerabilities (CVE-2025-66209, CVE-2025-66210, CVE-2025-66211, CVE-2025-66212, CVE-2025-66213, CVE-2025-59156, CVE-2025-59157, and CVE-2025-59158) are command injection vulnerabilities. These flaws allow authenticated users to execute arbitrary system commands, potentially leading to server compromise.

Impact on North East India and India

While the majority of exposed Coolify hosts are located outside India, with significant numbers in Germany, the U.S., France, Brazil, and Finland, it is crucial for organizations in North East India to be aware of these vulnerabilities, as they could potentially impact any organization using Coolify.

Information Disclosure Vulnerabilities

Information disclosure vulnerabilities (CVE-2025-64420 and CVE-2025-64424) allow low-privileged users to view the private key of the root user on the Coolify instance. This could enable unauthorized access to the server via SSH and authentication as the root user using the key.

Impact on North East India and India

Information disclosure vulnerabilities can pose a significant threat to the security of data stored on affected servers. Organizations in North East India and across India using Coolify should take immediate steps to mitigate these risks.

Cross-Site Scripting (XSS) Vulnerability

A stored cross-site scripting (XSS) vulnerability (CVE-2025-59158) allows an authenticated user with low privileges to conduct a stored XSS attack during project creation. This attack could be executed in the browser context when an administrator later attempts to delete the project or its associated resource.

Impact on North East India and India

XSS attacks can be used to steal sensitive information, manipulate user sessions, and redirect users to malicious websites. Organizations in North East India and across India using Coolify should prioritize addressing this vulnerability to protect their users and data.

As of January 8, 2026, there are approximately 52,890 exposed Coolify hosts worldwide. While there is no evidence that these vulnerabilities have been exploited in the wild, it is essential that users apply the necessary fixes as soon as possible due to their severity.

Looking Forward

The disclosure of these vulnerabilities serves as a reminder of the importance of maintaining vigilant cybersecurity practices. Organizations using Coolify should regularly update their platforms and stay informed about new vulnerabilities and security best practices.