CVE-2026-34047
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
In Coolify prior to version 4.0.0-beta.471, terminal WebSocket bootstrap routes did not enforce the expected authorization middleware, allowing an authenticated user to access terminal functionality for resources outside the authorized scope and potentially execute commands.
Risk Assessment
The risk involves potential privilege escalation by an authenticated user who can gain unauthorized access to the terminal of other resources and execute commands on them, potentially compromising the confidentiality, integrity, and availability of the system.
Recommendation
Immediately update Coolify to version 4.0.0-beta.471 or later, which includes a fix that enforces authorization on terminal WebSocket bootstrap routes.
Original NVD description (English source)
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, terminal WebSocket bootstrap routes did not enforce the expected authorization middleware, allowing an authenticated user to access terminal functionality for resources outside the authorized scope and potentially execute commands. This issue is fixed in version 4.0.0-beta.471.