CVE-2026-34594
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk61th percentile — higher than 61% of all known CVEs
Summary
In Coolify prior to version 4.0.0-beta.471, an authenticated command injection vulnerability in the Destination Network Management functionality allows users with network management permissions to execute arbitrary commands as root on managed servers. The "network" parameter is passed directly to shell commands without sanitization, enabling full remote code execution.
Risk Assessment
An attacker can gain full control over the managed server, compromising confidentiality, integrity, and availability of data and services. The vulnerability allows privilege escalation to root level.
Recommendation
Update Coolify to version 4.0.0-beta.471 or later immediately. Until the update, restrict network management permissions to trusted users only.
Original NVD description (English source)
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, an authenticated command injection vulnerability in the Destination Network Management functionality allows users with destination management permissions to execute arbitrary commands as root on managed servers. The "network" parameter is passed directly to shell commands without proper sanitization, enabling full remote code execution on the host system. This vulnerability is fixed in 4.0.0-beta.471.