CVE-2025-66212CWE-78command-injection

CVE-2025-66212

High ยท published December 24, 2025

CVSS v3.1
8.8
EPSS
3%
Percentile
87.8
In the wild
Unconfirmed
What it is

๐Ÿšจ An authenticated user with management permissions can execute commands as root on your servers! This critical command injection vulnerability in Coolify is a game changer! ๐Ÿ”ฅ Think of it like a trusted hotel guest who gets access to the staff-only area, but instead of just snooping around, they can take control of everything from the kitchen to the central security system! An attacker could exploit this vulnerability to run arbitrary commands, potentially gaining full control of your managed servers. This means they could access sensitive data, manipulate server settings, or even disrupt your entire application ecosystem! Absolutely devastating!

Put simply

Think of it like a trusted hotel guest who gets access to the staff-only area, but instead of just snooping around, they can take control of everything from the kitchen to the central security system! The issue arises when proxy configuration filenames are passed to shell commands without proper escaping, leading to remote code execution for authenticated users with management privileges. This flaw allows attackers to manipulate command inputs to execute their own code.

What to do

An attacker could exploit this vulnerability to run arbitrary commands, potentially gaining full control of your managed servers. This means they could access sensitive data, manipulate server settings, or even disrupt your entire application ecosystem! Absolutely devastating! To secure your setup, immediately upgrade Coolify to version 4.0.0-beta.451 or later. Additionally, review user permissions and ensure that only trusted personnel have management access to the application. Regularly monitor your systems for unusual activity! Youโ€™ve got this! Act quickly, and youโ€™ll have your servers shielded in no time! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS v3.1
8.8 ยท HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03122 ยท 87.8th percentile
Weakness
CWE-78 ยท Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2025-12-24T03:15Z
Affected products (441)
ProductVersionsFixed in
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolify< 4.0.04.0.0
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
coollabs/coolifyall versionsโ€”
References (5)
EPSS history
Timeline
  • 23 DEC 22:04Z
    Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Dynamic Proxy Configuration Filename
    cvelistv5