High ยท published December 24, 2025
๐จ A single line in your PostgreSQL init script could let an attacker run any command as root! ๐ฅ Think of it as letting someone order from a restaurant menu that has no checks โ they could ask for anything, from a simple salad to a gourmet feast, and you'd have to serve it without question! This vulnerability could lead to an absolute nightmare โ an attacker could gain complete control over your managed servers, potentially altering, deleting, or leaking critical data. With the ability to execute arbitrary commands, the consequences could be devastating for your entire application ecosystem.
Think of it as letting someone order from a restaurant menu that has no checks โ they could ask for anything, from a simple salad to a gourmet feast, and you'd have to serve it without question! The authenticated command injection flaw in Coolify allows users with application/service management permissions to pass unvalidated PostgreSQL script filenames to shell commands, enabling remote code execution as root.
This vulnerability could lead to an absolute nightmare โ an attacker could gain complete control over your managed servers, potentially altering, deleting, or leaking critical data. With the ability to execute arbitrary commands, the consequences could be devastating for your entire application ecosystem. Immediately upgrade Coolify to version 4.0.0-beta.451 or later to patch this vulnerability. Additionally, audit your PostgreSQL initialization scripts and ensure proper validation measures are in place to prevent future exploits. You've got this! With these steps, your servers will be on the road to safety in no time! ๐ก๏ธ
| Product | Versions | Fixed in |
|---|---|---|
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | < 4.0.0 | 4.0.0 |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |