Skip to content
Threat Feed
Subscribe

Product

Coolify (<= 4.3.17)

1 brief RSS
high advisory

Command Injection Vulnerability in Coolify

Coolify versions before 4.2.0 are vulnerable to command injection via environment variable keys, allowing authenticated attackers to execute arbitrary commands on the underlying host server.

Coolify +2 vulnerability remote-code-execution cloud authentication-bypass web-application
4t 1c updated