CVE-2025-64420
Critical · 9.9CVSS
9.9
EPSS
0.5%
Published
Jan 5, 2026
CISA due date
—
The record
Coolify members can see private key of root user
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-104850 MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and… CWE-522
- CVE-2026-91766 When the http:// stream wrapper follows a redirect it forwards the user-supplied… CWE-522
- CVE-2026-64918 Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker… CWE-522
- CVE-2026-86600 In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud… CWE-522
- CVE-2026-76969 @sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality… CWE-522
- CVE-2026-86175 NetBox through 4.7.0 fails to redact sensitive data source backend credentials in REST… CWE-522
- CVE-2026-53603 nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. CWE-522
- CVE-2026-8862 IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded… CWE-522