CVE-2026-34048
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
In Coolify prior to version 4.0.0-beta.471, terminal websocket bootstrap routes only check authentication and do not enforce terminal authorization. This allows a low-privileged team member to connect to terminal routes and execute commands on team servers.
Risk Assessment
The risk is that an unauthorized user can gain terminal access to servers and execute arbitrary commands, potentially compromising the confidentiality, integrity, and availability of managed resources.
Recommendation
Immediately upgrade Coolify to version 4.0.0-beta.471 or later, which includes a fix that enforces terminal authorization.
Original NVD description (English source)
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, terminal websocket bootstrap routes only check authentication and do not enforce terminal authorization, allowing a low-privileged team member to connect to terminal routes and execute commands on team servers. This issue is fixed in version 4.0.0-beta.471.