High Β· published January 6, 2026
π¨ A crafty command injection vulnerability lurking in Coolify lets low privileged users execute system commands as root! π₯ Think of this like a hotel with a guest who can sneak into the manager's office and change the entire reservation system β chaos waiting to happen! β οΈ An attacker could wield this vulnerability to gain complete control over the Coolify instance. They could install malicious software, manipulate server configurations, or even bring services to a halt. This scenario is absolutely devastating for anyone relying on Coolify for server management!
Think of this like a hotel with a guest who can sneak into the manager's office and change the entire reservation system β chaos waiting to happen! β οΈ This command injection flaw in Coolify's git source input fields allows low privileged users to craft malicious commands that execute at the root level, compromising the entire server's integrity.
An attacker could wield this vulnerability to gain complete control over the Coolify instance. They could install malicious software, manipulate server configurations, or even bring services to a halt. This scenario is absolutely devastating for anyone relying on Coolify for server management! Immediately update Coolify to the latest version, keeping an eye out for any patches addressing this vulnerability. If youβre using an affected version, consider restricting access to the git source input fields until a fix is available. π‘ You've got this! Stay vigilant and proactive, and you'll be a security hero in no time! π¦Έ
| Product | Versions | Fixed in |
|---|---|---|
| coollabs/coolify | < 4.0.0 | 4.0.0 |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |
| coollabs/coolify | all versions | β |