Skip to content
OpenAdvisories

Product · coolLabs Technologies

Coolify

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.4
    CVE-2025-34157 Public exploit

    Coolify Stored Cross-Site Scripting (XSS) in Project Name Field

    Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a stored cross-site scripting (XSS) attack in the project creation workflow. An authenticated user with low privileges can create a project with a maliciously crafted name containing embedded JavaS…

    coolLabs Technologies Coolify
  • Critical 9.4
    CVE-2025-34159 Public exploit

    Coolify Docker Compose Directive Injection in Application Deployment Workflow

    Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a remote code execution vulnerability in the application deployment workflow. The platform allows authenticated users, with low-level member privileges, to inject arbitrary Docker Compose directive…

    coolLabs Technologies Coolify
  • Critical 9.4
    CVE-2025-34161 Public exploit

    Coolify Git Repository Field Command Injection in Project Deployment Workflow

    Coolify versions prior to v4.0.0-beta.420.7 are vulnerable to a remote code execution vulnerability in the project deployment workflow. The platform allows authenticated users, with low-level member privileges, to inject arbitrary shell commands via the Git R…

    coolLabs Technologies Coolify