CVE-2026-34034
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
Coolify prior to version 4.0.0-beta.466 has a vulnerability due to insufficient validation of the sentinel_token setting used in shell commands. An authenticated user with access to server Sentinel settings can inject shell syntax and execute commands on the host when Sentinel is restarted.
Risk Assessment
An attacker can take control of the Coolify host server by executing arbitrary system commands, leading to full infrastructure compromise and potential data breach.
Recommendation
Immediately upgrade Coolify to version 4.0.0-beta.466 or later, which contains the fix for this vulnerability.
Original NVD description (English source)
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.466, the sentinel_token setting is used in shell commands without sufficient validation, allowing an authenticated user with access to server Sentinel settings to inject shell syntax and execute commands on the host when Sentinel is restarted. This issue is fixed in version 4.0.0-beta.466.