On second thoughts, I will mark this issue as 'resolved' here. If you can send us a detailed report to security@cloudron.io , would be much appreciated.
edit: i actually see that you already reported this there. Thanks, let's follow up there.
@derin If email works, you can just click Reset password in the login page and you will get an email with the reset link. If email is wrong or does not work, you can SSH into the server and run cloudron-support --admin-login. This will give you a one time use password (will also print the username to use). You can then go to Profile and change the password. Note that you have to run the command again to get a new password when changing the password.
Done. I also made a change now where that ghost file is automatically removed after you use it once to login. Just in case, people forget to remove it.
