High ยท published December 24, 2025
๐จ An authenticated user with management permissions can execute commands as root on your servers! This critical command injection vulnerability in Coolify is a game changer! ๐ฅ Think of it like a trusted hotel guest who gets access to the staff-only area, but instead of just snooping around, they can take control of everything from the kitchen to the central security system! An attacker could exploit this vulnerability to run arbitrary commands, potentially gaining full control of your managed servers. This means they could access sensitive data, manipulate server settings, or even disrupt your entire application ecosystem! Absolutely devastating!
Think of it like a trusted hotel guest who gets access to the staff-only area, but instead of just snooping around, they can take control of everything from the kitchen to the central security system! The issue arises when proxy configuration filenames are passed to shell commands without proper escaping, leading to remote code execution for authenticated users with management privileges. This flaw allows attackers to manipulate command inputs to execute their own code.
An attacker could exploit this vulnerability to run arbitrary commands, potentially gaining full control of your managed servers. This means they could access sensitive data, manipulate server settings, or even disrupt your entire application ecosystem! Absolutely devastating! To secure your setup, immediately upgrade Coolify to version 4.0.0-beta.451 or later. Additionally, review user permissions and ensure that only trusted personnel have management access to the application. Regularly monitor your systems for unusual activity! Youโve got this! Act quickly, and youโll have your servers shielded in no time! ๐ก๏ธ
| Product | Versions | Fixed in |
|---|---|---|
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | < 4.0.0 | 4.0.0 |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |