High ยท published December 24, 2025
๐ฅ An authenticated command injection vulnerability in Coolify lets users with management permissions execute arbitrary commands as root โ talk about a security nightmare! Think of it like a restaurant where the chef can directly change the menu without any oversight. If no one checks what the chef is cooking up, they could serve anything, even dishes that could harm the customers! ๐ฝ๏ธ This vulnerability could allow malicious users to run any command on the host system, potentially compromising sensitive data or taking complete control over the server. It's like giving someone a master key to your home without a background check โ absolutely devastating!
Think of it like a restaurant where the chef can directly change the menu without any oversight. If no one checks what the chef is cooking up, they could serve anything, even dishes that could harm the customers! ๐ฝ๏ธ The flaw exists in the File Storage Directory Mount Path functionality prior to version 4.0.0-beta.451, where the file_storage_directory_source parameter is directly passed to shell commands without proper sanitization, allowing remote code execution.
This vulnerability could allow malicious users to run any command on the host system, potentially compromising sensitive data or taking complete control over the server. It's like giving someone a master key to your home without a background check โ absolutely devastating! To secure your systems, immediately upgrade to version 4.0.0-beta.451. Additionally, review user permissions and limit access to only those who absolutely need it. Regularly audit your application to ensure no unauthorized changes slip through! You've got this! Just follow these steps and your security hero status will be locked in tight! ๐ก๏ธ
| Product | Versions | Fixed in |
|---|---|---|
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | < 4.0.0 | 4.0.0 |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |
| coollabs/coolify | all versions | โ |