CVE-2025-59157

🚨 A crafty command injection vulnerability in Coolify could let any regular user run arbitrary shell commands on your server! 🔥 Think of it like a restaurant where the chef blindly follows any special requests without checking if they’re safe — one harmful recipe could ruin the whole kitchen. That’s exactly what’s happening here when user input isn’t sanitized during project creation. An attacker could use this vulnerability to execute any shell command on the server, potentially compromising sensitive data, altering configurations, or even taking full control of the system. This is a huge risk, as it puts your entire server environment at the mercy of any malicious user. It's a wake-up call for everyone who relies on Coolify!

An attacker could use this vulnerability to execute any shell command on the server, potentially compromising sensitive data, altering configurations, or even taking full control of the system. This is a huge risk, as it puts your entire server environment at the mercy of any malicious user. It's a wake-up call for everyone who relies on Coolify! Patch to version 4.0.0-beta.420.7 immediately to close this loophole. Additionally, review your input validation mechanisms to ensure that similar vulnerabilities don’t arise in the future. Implement strict sanitization protocols when handling user input! You've got this! Stay vigilant and proactive, and your server will be fortified against threats like this! 🛡️