Coolify versions before 4.2.0 are vulnerable to command injection via environment variable keys, allowing authenticated attackers to execute arbitrary commands on the underlying host server.
Coolify +1
vulnerability
remote-code-execution
cloud
authentication-bypass
web-application
4t
1c
updated