Coolify Private Key Exposure Vulnerability Allowing Root Access via SSH

A vulnerability exists in Coolify, an open-source tool for managing servers, applications, and databases, in versions through v4.0.0-beta.434. Low privileged users can access the private key of the root user on the Coolify instance. This access enables them to authenticate as the root user via SSH. As of the vulnerability's publication, it is unclear whether a patch is available.

Impact

Exploitation of this vulnerability allows low privileged users to access the private key of the root user, enabling them to authenticate as root via SSH on the server where Coolify is hosted.

Reproduction

Low privileged users can view the private key of the root user within the Coolify application. This key can then be used to SSH into the server as the root user.