Skip to content
OpenAdvisories

Vendor

coollabsio

76 known vulnerabilities.

Products

coolify 76
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.8
    CVE-2026-59734 Public exploit

    Coolify: OS Command Injection in Health Check Configuration Allows Remote Code Execution

    Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.469, Coolify's app/Jobs/ApplicationDeploymentJob.php generate_healthcheck_commands() function directly interpolated the health_check_host, …

    coollabsio coolify
  • Critical 9.9
    CVE-2026-34048 Public exploit

    Coolify: Missing authorization on terminal websocket bootstrap routes allows low-privileged members to execute commands on team servers

    Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, terminal websocket bootstrap routes only check authentication and do not enforce terminal authorization, allowing a low-privileged tea…

    coollabsio coolify
  • Critical 9.9
    CVE-2026-34038 Public exploit

    Coolify authenticated remote command injection leading to RCE and secret exfiltration

    Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.469, an authenticated remote command injection vulnerability in application deployment handling allows users with application write permiss…

    coollabsio coolify
  • Critical 9.4
    CVE-2025-64424 Public exploit

    Colify has command injection vulnerability in project git source

    Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions up to and including v4.0.0-beta.434, a command injection vulnerability exists in the git source input fields of a resource, allowing a low …

    coollabsio coolify
  • Critical 10.0
    CVE-2025-66209 Public exploit

    Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Backup

    Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.451, an authenticated command injection vulnerability in the Database Backup functionality allows users with application/service ma…

    coollabsio coolify