What is the CVSS score of CVE-2026-42204?

CVE-2026-42204 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

Which versions of Coolify are affected by CVE-2026-42204?

Coolify versions 4.0.0-beta.471 through 4.0.0-beta.473 contain an operating system command injection vulnerability allowing authenticated team members to execute arbitrary system commands on managed…. A patch is available.

How to fix or mitigate CVE-2026-42204?

24 hours: Identify all Coolify deployments running versions 4.0.0-beta.471 through 4.0.0-beta.473 and restrict administrative access to trusted personnel only. 7 days: Upgrade all affected systems to Coolify 4.0.0-beta.474 or later. 30 days: Review access control policies for Coolify team members and audit logs for suspicious Docker Compose command execution.

Coolify CVE-2026-42204

EUVD-2026-41955 HIGH

OS Command Injection (CWE-78)

2026-07-06 GitHub_M

Docker Command Injection Coolify Coollabsio

8.8

CVSS 3.1 · Vendor: GitHub_M

Severity by source

Vendor (GitHub_M) PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

8.8 HIGH

Network-reachable UI/API with only authenticated team-member access (PR:L) and no user interaction; injected command yields full host code execution, giving high C/I/A.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (GitHub_M).

CVSS VectorVendor: GitHub_M

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch available

Jul 06, 2026 - 23:01 EUVD

Analysis Generated

Jul 06, 2026 - 22:28 vuln.today

CVE Published

Jul 06, 2026 - 21:17 cve.org

HIGH 8.8

DescriptionCVE.org

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. From 4.0.0-beta.471 through 4.0.0-beta.473, a regression in SHELL_SAFE_COMMAND_PATTERN allowed ampersands in custom Docker Compose build, start, and pre/post-deployment command fields, allowing an authenticated team member to inject shell commands that execute on the host. This issue is fixed in version 4.0.0-beta.474.

Articles & Coverage 1

News 5 New Docker Vulnerabilities - 1 Critical, 4 High, 1 With POC Jul 07, 2026

AnalysisAI

OS command injection in Coolify (self-hosted server/app/database management platform) versions 4.0.0-beta.471 through 4.0.0-beta.473 lets an authenticated team member run arbitrary shell commands on the underlying host. A regression weakened the SHELL_SAFE_COMMAND_PATTERN allowlist so that ampersands were permitted in custom Docker Compose build, start, and pre/post-deployment command fields, enabling command chaining. The issue is fixed in 4.0.0-beta.474; no public exploit identified at time of analysis, and it is not listed in CISA KEV.

Technical ContextAI

Coolify is an open-source, self-hostable PaaS-style controller that provisions and deploys applications, databases, and services onto managed servers, largely by orchestrating Docker and Docker Compose. To let users customize deployments, it exposes free-text fields for custom Docker Compose build/start commands and pre/post-deployment hooks, which are ultimately passed to a shell on the host. To constrain this, Coolify uses an input allowlist named SHELL_SAFE_COMMAND_PATTERN. The vulnerability is a CWE-78 (OS Command Injection) flaw introduced as a regression in that pattern: it began accepting the ampersand metacharacter, which the shell interprets for background execution and command sequencing (e.g., &&, &), breaking the intended sandboxing of the supplied command string. The affected code is identified by CPE cpe:2.3:a:coollabsio:coolify and was corrected in PR #9684 / commit e1aac50.

RemediationAI

Vendor-released patch: upgrade to Coolify 4.0.0-beta.474 (https://github.com/coollabsio/coolify/releases/tag/v4.0.0-beta.474), which restores the correct SHELL_SAFE_COMMAND_PATTERN via PR #9684 (https://github.com/coollabsio/coolify/pull/9684) and commit e1aac50b745cf499e710b7e35cd2a9d6a1538dd9. As a compensating control until patched, restrict who holds team membership and edit rights on projects so untrusted users cannot modify custom Docker Compose build/start or pre/post-deployment command fields, and audit those fields for injected ampersand/command-chaining sequences; the trade-off is reduced self-service for legitimate operators. Rotating or tightening team-member credentials and limiting network exposure of the Coolify UI/API further reduces the authenticated-attacker surface. Details are in advisory GHSA-chg4-63hm-xv9x (https://github.com/coollabsio/coolify/security/advisories/GHSA-chg4-63hm-xv9x).