CVE-2025-34159

CVE-2025-34159：Coolify 中的 Docker Compose 注入漏洞 漏洞概述 字段| 值 ---|--- CVE 标识符| CVE-2025-34159 影响范围| Coolify ≤ v4.0.0-beta.420.6 修复版本| v4.0.0-beta.420.7 严重性| 严重 CVSS 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE| CWE-78（操作系统命令注入）、CWE-20（输入验证不恰当） 执行摘要 Coolify...

CVE-2025-64424-Coolify-

Coolify CVE-2025-64424 RCE 漏洞实验室 教案：Red74-Coolio-CVE-2025-64424 免责声明： 该仓库包含一个故意存在漏洞的 Coolify 版本，仅供教育目的、CTF 环境和网络安全培训使用。请勿在生产环境中部署或将其暴露于公共互联网。 此实验室提供了一个本地容器化环境，用于安全地学习和利用 Coolify 版本（低于 4.0.0-beta.420.7）的 Git 仓库源字段中存在的命令注入/远程代码执行（RCE）漏洞（CVE-2025-64424 / GHSA-qx24-jhwj-8w6x ）。 🚀 实验室部署说明...

CVE-2026-34038

CVE-2026-34038：Coolify 中的认证远程命令注入漏洞 此仓库包含针对 CVE-2026-34038 （Coolify 中的一个严重命令注入漏洞）的文档和分析。 摘要 Coolify 中存在一个经身份验证的远程命令注入漏洞（CWE-78），允许拥有应用程序 “写入” 权限的用户实现 远程代码执行（RCE） 并 窃取 敏感环境变量（例如数据库凭据、API 密钥），即使构建环境隔离了 Docker 套接字。 漏洞类型： CWE-78（操作系统命令注入） 严重性： 严重（CVSS 10.0） 攻击向量：...

CVE-2026-34048

CVE-2026-34048 仅检查登录状态的管理员终端引导路由，使得普通团队成员能够驱动 Coolify 的实时终端后端并在团队服务器上执行命令。 简介 我在审查 Coolify （一个开源的自托管 PaaS）时发现了这个问题，当时我心中有一个非常直接的安全性问题： 终端访问是否在后端信任边界处实际强制执行，还是仅在 UI 中？ 在这个案例中，答案是糟糕的。 Coolify 本意是将终端访问限制为团队管理员和所有者，但实时终端引导路由仅检查用户是否已登录。这使得低权限的团队成员能够满足 websocket 终端的信任检查，从而在团队服务器上执行命令。...

coolify-cve-2025-66209-66213

Coolify 安全公告 - CVE-2025-66209 至 CVE-2025-66213 报告者: 0xrakan 供应商: coollabsio/coolify 受影响版本: v4.0.0-beta.451 修复版本: v4.0.0-beta.451 严重性: 严重 CVSS 9.4 概述 在 Coolify 中发现了五个严重的经过身份验证的命令注入漏洞，允许具有应用程序/服务管理权限的经过身份验证的用户在受管服务器上以 root 身份执行任意命令，从而实现容器逃逸和完全主机系统沦陷。 漏洞 CVE-2025-66213 - 文件存储目录挂载路径中的命令注入导致认证远程代码执行...

CVE-2026-59734-POC

黑客闪烁 🚨 CVE-2026-59734 — Coolify RCE 利用 健康检查中的操作系统命令注入 → 远程代码执行 针对 Coolify 健康检查配置中 OS 命令注入的概念验证利用脚本。 任何经过身份验证的用户都可在已部署的容器内执行任意命令。 🎯 关于漏洞 Coolify 是一款流行的开源自托管部署平台（GitHub 星标超过 30K）——是 Heroku、Vercel 和 Netlify 的免费替代品。 在 Coolify 的健康检查配置中发现了一个严重的 OS 命令注入 漏洞。healthcheckhost、healthcheckmethod 和...

CVE-2026-100746

A vulnerability was found in coollabsio Coolify up to 4.1.0. This affects the function Github::redirect of the file /webhooks/source/github/redirect of the component GitHub App Setup Handler. The manipulation of the argument state results in missing authentication. The attack can be executed...

CVE-2026-100746 coollabsio Coolify GitHub App Setup redirect missing authentication

A vulnerability was found in coollabsio Coolify up to 4.1.0. This affects the function Github::redirect of the file /webhooks/source/github/redirect of the component GitHub App Setup Handler. The manipulation of the argument state results in missing authentication. The attack can be executed...

EUVD-2026-87884

A vulnerability was found in coollabsio Coolify up to 4.1.0. This affects the function Github::redirect of the file /webhooks/source/github/redirect of the component GitHub App Setup Handler. The manipulation of the argument state results in missing authentication. The attack can be executed...

CVE-2026-100746 coollabsio Coolify GitHub App Setup redirect missing authentication

A vulnerability was found in coollabsio Coolify up to 4.1.0. This affects the function Github::redirect of the file /webhooks/source/github/redirect of the component GitHub App Setup Handler. The manipulation of the argument state results in missing authentication. The attack can be executed...

CVE-2026-100746 coollabsio Coolify GitHub App Setup redirect missing authentication

A vulnerability was found in coollabsio Coolify up to 4.1.0. This affects the function Github::redirect of the file /webhooks/source/github/redirect of the component GitHub App Setup Handler. The manipulation of the argument state results in missing authentication. The attack can be executed...

CVE-2026-100746

A vulnerability exists in coollabsio Coolify (versions up to 4.1.0 ) within the GitHub App Setup Handler component. Specifically, the Github::redirect function in the /webhooks/source/github/redirect file is susceptible to missing authentication due to the manipulation of the state argument. This...

CVE-2026-100744

A flaw has been found in coollabsio Coolify up to 4.1.2. The affected element is an unknown function of the file app/Http/Middleware/CanUpdateResource.php of the component Route-Level Middleware. Executing a manipulation can lead to missing authorization. The attack may be launched remotely. The...

EUVD-2026-87817

A flaw has been found in coollabsio Coolify up to 4.1.2. The affected element is an unknown function of the file app/Http/Middleware/CanUpdateResource.php of the component Route-Level Middleware. Executing a manipulation can lead to missing authorization. The attack may be launched remotely. The...

CVE-2026-100744 coollabsio Coolify Route-Level Middleware CanUpdateResource.php authorization

A flaw has been found in coollabsio Coolify up to 4.1.2. The affected element is an unknown function of the file app/Http/Middleware/CanUpdateResource.php of the component Route-Level Middleware. Executing a manipulation can lead to missing authorization. The attack may be launched remotely. The...

CVE-2026-100744 coollabsio Coolify Route-Level Middleware CanUpdateResource.php authorization

A flaw has been found in coollabsio Coolify up to 4.1.2. The affected element is an unknown function of the file app/Http/Middleware/CanUpdateResource.php of the component Route-Level Middleware. Executing a manipulation can lead to missing authorization. The attack may be launched remotely. The...

CVE-2026-100744

A flaw in coollabsio Coolify versions up to 4.1.2 within the Route-Level Middleware component leads to a missing authorization vulnerability. The issue resides in an unknown function within the app/Http/Middleware/CanUpdateResource.php file. This flaw can be triggered via a remote manipulation at...

CVE-2026-100744 coollabsio Coolify Route-Level Middleware CanUpdateResource.php authorization

A flaw has been found in coollabsio Coolify up to 4.1.2. The affected element is an unknown function of the file app/Http/Middleware/CanUpdateResource.php of the component Route-Level Middleware. Executing a manipulation can lead to missing authorization. The attack may be launched remotely. The...

CVE-2026-100744: Missing Authorization

A flaw has been found in coollabsio Coolify up to 4.1.2. The affected element is an unknown function of the file app/Http/Middleware/CanUpdateResource.php of the component Route-Level Middleware. Executing a manipulation can lead to missing authorization. The attack may be launched remotely. The...

CVE-2025-34157

Coolify 删除流程中的存储型 XSS（CVE-2025-34157） 受影响版本： Coolify ≤ v4.0.0-beta.420.6 修复版本： v4.0.0-beta.420.7 严重性： 严重（9.4） CVSS 4.0 向量： CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE： CWE-79（跨站脚本），CWE-20（输入验证不当） 摘要 项目删除流程中的存储型 XSS 允许攻击者在管理员尝试删除由低权限用户创建的项目时，在管理员的浏览器中执行攻击者控制的 JavaScript。这可能...