Skip to content
Threat Feed
Subscribe

Product

Coolify (<= 4.1.0)

1 brief RSS
high advisory

Authentication Bypass in Coolify GitHub App Setup Handler

An unauthenticated remote code execution vulnerability (CVE-2026-100746) in Coolify versions 4.1.0 and earlier allows attackers to bypass authentication via the GitHub App setup flow.

Coolify vulnerability web-application authentication-bypass
1t 1c