Priority HIGH 72
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
Vulnerabilities
28 records
Priority HIGH 76
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
TI-2025-39837 CVE-2025-64423
Coolify has a Privilege Escalation - low privileged users can see and use admin invitation links
Priority HIGH 69
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
Priority LOW 31
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
TI-2025-39835 CVE-2025-64421
Coolify has a privilege escalation - low privileged user can invite themselves as an admin user
Priority LOW 39
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
Priority MEDIUM 43
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
TI-2025-39833 CVE-2025-64419
Coolify vulnerable to command injection via docker-compose.yaml parameters
Priority HIGH 76
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
TI-2025-37343 CVE-2025-59955
Coolify leaksensitive information `email_change_code` in `/api/v1/teams/{team_id | current}/members` API endpoint
Priority MEDIUM 59
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
TI-2025-36762 CVE-2025-59158
Coolify has Stored XSS in Project Name
Priority HIGH 76
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
TI-2025-36761 CVE-2025-59157
Coolify has Git Repository RCE
Priority HIGH 76
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
TI-2025-36760 CVE-2025-59156
Coolify has Docker Compose Injection issue
Priority HIGH 76
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
TI-2025-40716 CVE-2025-66213
Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in File Storage Directory Mount Path
Priority HIGH 82
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
TI-2025-40715 CVE-2025-66212
Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Dynamic Proxy Configuration Filename
Priority HIGH 82
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
TI-2025-40714 CVE-2025-66211
Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in PostgreSQL Init Script Filename
Priority HIGH 82
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
TI-2025-40713 CVE-2025-66210
Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Import
Priority HIGH 82
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
TI-2025-40712 CVE-2025-66209
Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Backup
Priority HIGH 82
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
TI-2025-24311 CVE-2025-34157 · GHSA-6p37-qg9q-mprw
Coolify Stored Cross-Site Scripting (XSS) in Project Name Field
Priority MEDIUM 43
Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a stored cross-site scripting (XSS) attack in the project creation workflow.
TI-2025-24313 CVE-2025-34159 · GHSA-qh8c-f279-4cgv
Coolify Docker Compose Directive Injection in Application Deployment Workflow
Priority MEDIUM 44
Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a remote code execution vulnerability in the application deployment workflow.
TI-2025-24315 CVE-2025-34161 · GHSA-xp99-74mm-rpv2
Coolify Git Repository Field Command Injection in Project Deployment Workflow
Priority MEDIUM 48
Coolify versions prior to v4.0.0-beta.420.7 are vulnerable to a remote code execution vulnerability in the project deployment workflow.
Priority LOW 8
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
TI-2025-16498 CVE-2025-22612
Coolify Vulnerable to Private Key Enumeration on Onboarding resulting in Remote Command Execution (RCE)
Priority HIGH 82
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
TI-2025-16497 CVE-2025-22611
Coolify vulnerable to Privilege Escalation resulting in Remote Command Execution (RCE)
Priority MEDIUM 43
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
TI-2025-16496 CVE-2025-22610
Coolify Vulnerable to OAuth Secrets Leak
Priority LOW 26
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
TI-2025-16495 CVE-2025-22609
Coolify Vulnerable to Private Key Hijacking / Remote Command Execution (RCE)
Priority HIGH 82
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
Priority HIGH 68
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.