1 matches found
CVE-2026-27955 Coolify: Command Injection via Single-Quote Breakout in `executeInDocker()`
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.464, the executeInDocker helper wraps commands in bash -c '$command' without escaping single quotes. User-controlled dockercomposecustombuildcommand and...
6.6CVSS0.00396EPSS
SaveExploits0References1
20