coolify-cve-2025-66209-66213

Avisos de Seguridad de Coolify - CVE-2025-66209 a CVE-2025-66213 Reportero: 0xrakan Vendedor: coollabsio/coolify Versiones Afectadas: v4.0.0-beta.451 Versión Corregida: v4.0.0-beta.451 Gravedad: Crítica CVSS 9.4 Resumen Se descubrieron cinco vulnerabilidades críticas de inyección de comandos...

Coolify Discloses 11 Critical Flaws Enabling Full Server Compromise on Self-Hosted Instances

Cybersecurity researchers have disclosed details of multiple critical-severity security flaws affecting Coolify, an open-source, self-hosting platform, that could result in authentication bypass and remote code execution. The list of vulnerabilities is as follows - CVE-2025-66209 CVSS score: 10.0...

CVE-2025-66213 Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in File Storage Directory Mount Path

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.451, an authenticated command injection vulnerability in the File Storage Directory Mount Path functionality allows users with application/service management permissions...