Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

coolify — Vulnerabilities & Security Advisories 78

All 78 CVE vulnerabilities found in coolify, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting Coolify, a self-hosted open-source platform designed for deploying and managing applications on personal servers. The collection encompasses a wide spectrum of weaknesses identified in the software, including remote code execution flaws, privilege escalation issues, and configuration errors reported over the past several years. Visitors can utilize this resource to track official vendor advisories, analyze the characteristics of specific weakness classes impacting the platform, or review the complete historical record of security incidents associated with Coolify. By centralizing these critical details, the page provides a clear view of the product's evolving security posture without requiring users to navigate disparate sources or fragmented reports. The data presented here serves as a foundational reference for security professionals, system administrators, and developers seeking to understand potential risks and implement necessary mitigations. All entries are curated to ensure accuracy and relevance, focusing strictly on confirmed issues that have been publicly disclosed or privately reported to the maintainers. This compilation aims to support proactive defense strategies by offering immediate access to essential vulnerability intelligence, enabling stakeholders to make informed decisions regarding their infrastructure security.

Vendor: coollabsio

CVE ID Title CVSS Severity Published
CVE-2026-100746 coollabsio Coolify GitHub App Setup redirect missing authentication CWE-306 7.3 High 2026-09-27
CVE-2026-100744 coollabsio Coolify Route-Level Middleware CanUpdateResource.php authorization CWE-862 7.3 High 2026-09-27
CVE-2026-86117 Coolify through 4.3.17 OAuth Account Takeover via Unverified Email Matching CWE-287 8.1 High 2026-09-05
CVE-2026-84694 Coolify before 4.2.0 Remote Code Execution via Environment Variable Key CWE-78 8.8 High 2026-09-02
CVE-2026-15507 coollabsio Coolify Policy Policies authorization CWE-862 6.3 Medium 2026-07-12
CVE-2026-59734 Coolify: OS Command Injection in Health Check Configuration Allows Remote Code Execution CWE-78 8.8 High 2026-07-09
CVE-2026-42201 Coolify: OS Command Injection via Database Credential Fields in Docker Compose Service Commands CWE-78 3.3 Low 2026-07-07
CVE-2026-34158 Coolify: Command injection via single-quote breakout in Docker Compose custom commands CWE-78 8.8 High 2026-07-07
CVE-2026-34170 Coolify: Server-Side Request Forgery via attacker-controlled GitHub App API URL CWE-918 4.3 Medium 2026-07-07
CVE-2026-34037 Cross-Tenant Resource Cloning via Broken Object-Level Authorization in cloneTo() CWE-639 9.9 Critical 2026-07-07
CVE-2026-34048 Coolify: Missing authorization on terminal websocket bootstrap routes allows low-privileged members to execute commands on team servers CWE-285 9.9 Critical 2026-07-07
CVE-2026-34057 Coolify: Authenticated Remote Code Execution via Command Injection in Database Import Container Name CWE-78 8.8 High 2026-07-07
CVE-2026-42143 Coolify: OS Command Injection via Persistent Volume Names - Root RCE on Managed Servers CWE-78 8.8 High 2026-07-07
CVE-2026-42147 Coolify: SSRF via S3 Storage Endpoint in testConnection() CWE-918 4.9 Medium 2026-07-07
CVE-2026-34044 Coolify: Cross-team IDOR in logs component (resource lookup not team-scoped) CWE-639 7.7 High 2026-07-07
CVE-2026-34152 Coolify: Command Injection via Newline in Pre/Post Deployment Commands (Heredoc Transport) CWE-78 8.8 High 2026-07-07
CVE-2026-34149 Coolify: Authenticated Host-Level RCE via Unescaped Database Credentials in Backup Jobs CWE-78 3.3 Low 2026-07-07
CVE-2026-34171 Coolify: Account takeover via CSRF-able GET endpoint that resets password to attacker-known value CWE-352 8.0 High 2026-07-07
CVE-2026-34034 Coolify: Host RCE via Sentinel token injection CWE-78 8.8 High 2026-07-07
CVE-2026-34168 Coolify: Command injection via unsanitized persistent storage name in docker volume commands CWE-78 8.8 High 2026-07-07
CVE-2026-42145 Coolify: File Upload Without Type or Size Validation in Database Backup Restore CWE-434 3.1 Low 2026-07-07
CVE-2026-34198 Coolify: Password reset link poisoning via X-Forwarded-Host header spoofing CWE-640 5.3 Medium 2026-07-07
CVE-2026-34058 Coolify: OS Command Injection via Unmanaged Container Operations - Remote Code Execution CWE-78 8.8 High 2026-07-07
CVE-2026-34035 Coolify: Host RCE via Log Drain secret/env command injection CWE-78 8.8 High 2026-07-07
CVE-2026-34047 Coolify: WebSocket Endpoint Access Control Flaw Leading to Remote Code Execution CWE-863 9.9 Critical 2026-07-07
CVE-2026-42172 Coolify: Sanctum API Tokens Have No Expiration — Leaked Tokens Grant Permanent Access CWE-613 3.1 Low 2026-07-07
CVE-2026-42200 Coolify: PostgreSQL Init Script Path Traversal Leads to Arbitrary File Write and Root RCE CWE-22 8.8 High 2026-07-07
CVE-2026-42153 Coolify: PostgreSQL Healthcheck Command Injection Allows Root Code Execution in Container CWE-78 8.8 High 2026-07-06
CVE-2026-34167 Coolify: Cross-tenant activity log disclosure via unlocked Livewire property in ActivityMonitor CWE-639 5.0 Medium 2026-07-06
CVE-2026-34049 Coolify: Command Injection via unsanitized MongoDB collection names in database backup CWE-78 3.3 Low 2026-07-06

All 78 known CVE vulnerabilities affecting coolify with full Chinese analysis, references, and POCs where available.