CVE-2025-34159

creationtimestamp| type| source ---|---|--- 2025-08-27 17:04:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115101811324852634 2025-08-30 21:02:29+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lxnhuaxpw52o...

CVE-2025-34159

Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a remote code execution vulnerability in the application deployment workflow. The platform allows authenticated users, with low-level member privileges, to inject arbitrary Docker Compose directives during project creation. By crafting...