Skip to content
OpenAdvisories
Medium WID-SEC-2026-3600 2 CVEs

Coolify: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen

Published Sep 27, 2026 · Updated Sep 27, 2026 · de-DE

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Coolify ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

Product

Coolify ist eine Open-Source-Plattform zur Vereinfachung der Bereitstellung und Verwaltung von Anwendungen.

Vulnerabilities 2

  • High 7.3
    CVE-2026-100744

    coollabsio Coolify Route-Level Middleware CanUpdateResource.php authorization

    A flaw has been found in coollabsio Coolify up to 4.1.2. The affected element is an unknown function of the file app/Http/Middleware/CanUpdateResource.php of the component Route-Level Middleware. Executing a manipulation can lead to missing authorization. The…

    coollabsio coolify
  • High 7.3
    CVE-2026-100746

    coollabsio Coolify GitHub App Setup redirect missing authentication

    A vulnerability was found in coollabsio Coolify up to 4.1.0. This affects the function Github::redirect of the file /webhooks/source/github/redirect of the component GitHub App Setup Handler. The manipulation of the argument state results in missing authentic…

    coollabsio coolify

Revision history

  1. #1

    Initiale Fassung

References