Lucene search
K

CVE-2025-34159 Coolify Docker Compose Directive Injection in Application Deployment Workflow

šŸ—“ļøĀ 27 Aug 2025Ā 16:47:54Reported byĀ VulnCheckTypeĀ 
cvelist
Ā cvelist
šŸ”—Ā www.cve.orgšŸ‘Ā 6Ā Views

CVE-2025-34159 Coolify RCE via Docker Compose directive injection by low-priv authenticated users during project creation; host root mount grants root access.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
GithubExploit
Exploit for CVE-2025-34159
22 Aug 202509:11
–githubexploit
ATTACKERKB
CVE-2025-34159
27 Aug 202516:47
–attackerkb
Circl
CVE-2025-34159
27 Aug 202517:04
–circl
CNNVD
Coolify å®‰å…Øę¼ę“ž
27 Aug 202500:00
–cnnvd
CVE
CVE-2025-34159
27 Aug 202516:47
–cve
EUVD
EUVD-2025-25911
3 Oct 202520:07
–euvd
NVD
CVE-2025-34159
27 Aug 202517:15
–nvd
OSV
CVE-2025-34159
27 Aug 202517:15
–osv
Positive Technologies
PT-2025-34900
27 Aug 202500:00
–ptsecurity
RedhatCVE
CVE-2025-34159
30 Aug 202518:18
–redhatcve
Rows per page
[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Docker Compose configuration parser"
    ],
    "product": "Coolify",
    "repo": "https://github.com/coollabsio/coolify",
    "vendor": "coolLabs Technologies",
    "versions": [
      {
        "lessThan": "4.0.0-beta.420.7",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation