Security2 hSeptember 30, 2026, 03:34

Coolify flaw let password-reset tokens be redirected to attacker hosts

A Coolify advisory describes a chain of trusted forwarded headers, a host-validation cache bug and a reset URL derived from the request, allowing reset tokens to be sent to an attacker-controlled domain. The issue is patched in v4.0.0-beta.471.

DEV Community

Open source

Reset link was built from the X-Forwarded-Host header
Host validation was skipped when the cache was empty
Attack required a forged header and a recipient click
Fix shipped in Coolify v4.0.0-beta.471

#Coolify

Default Join Key Let Attackers Mint Admin Tokens on JFrog Artifactory

Security

cPanel flaw lets a hosting account run code as root and take over the server

Security

Linux KVM ARM64 Flaw Lets Guests Read and Write Host Memory

Security

Coolify flaw let password-reset tokens be redirected to attacker hosts

Default Join Key Let Attackers Mint Admin Tokens on JFrog Artifactory

cPanel flaw lets a hosting account run code as root and take over the server

Linux KVM ARM64 Flaw Lets Guests Read and Write Host Memory

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files