CVE-2026-42200
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
Coolify prior to version 4.0.0-beta.474 has a vulnerability in the PostgreSQL initialization script that allows an authenticated user to write files outside the intended directory and achieve command execution through database initialization.
Risk Assessment
An attacker can achieve remote code execution on the server, leading to full system and data compromise.
Recommendation
Immediately update Coolify to version 4.0.0-beta.474 or later.
Original NVD description (English source)
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, PostgreSQL initialization script (generate_init_scripts() method in app/Actions/Database/StartPostgresql.php) filename handling did not sufficiently restrict paths, allowing an authenticated user to write files outside the intended directory and achieve command execution through database initialization. This issue is fixed in version 4.0.0-beta.474.