EUVD-2026-41983Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Network-reachable Livewire endpoint (AV:N/AC:L), requires an authenticated team account (PR:L), no user interaction, and unsanitized shell injection yields full OS command execution (C:H/I:H/A:H).
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
Lifecycle Timeline
2DescriptionCVE.org
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the Livewire component Server\Resources exposes public methods (startUnmanaged, stopUnmanaged, restartUnmanaged) that accept a container ID parameter directly from the browser without any sanitization or escaping. This parameter is interpolated directly into shell commands executed via SSH on managed servers, enabling any authenticated team member to execute arbitrary OS commands on remote servers. This issue is fixed in version 4.0.0-beta.471.
AnalysisAI
OS command injection in Coolify's self-hosted server-management platform (all versions prior to 4.0.0-beta.471) lets any authenticated team member execute arbitrary shell commands on any managed remote server. The flaw lives in the Livewire Server\Resources component, whose public startUnmanaged/stopUnmanaged/restartUnmanaged methods take a browser-supplied container ID and interpolate it unescaped into SSH-executed shell commands. No public exploit identified at time of analysis and it is not in CISA KEV, but the trivially low complexity (CVSS 8.8) makes exploitation straightforward for anyone with a team account.
Technical ContextAI
Coolify is an open-source, self-hostable PaaS (a Heroku/Netlify/Vercel alternative) that provisions and controls applications, databases, and Docker containers across fleets of remote servers over SSH. It is built on the Laravel Livewire framework, where server-side component methods can be invoked directly from the browser. The affected Server\Resources component declares startUnmanaged, stopUnmanaged, and restartUnmanaged as public (browser-callable) methods that receive a container ID argument. Because Livewire exposes public methods as remote endpoints, an attacker can call them with an arbitrary value. That value is concatenated directly into a shell command string (e.g. a docker start/stop/restart invocation) that Coolify then runs on the target managed host through its SSH connection. This is a textbook CWE-78 (Improper Neutralization of Special Elements used in an OS Command) issue: the absence of shell-escaping or input validation allows shell metacharacters (;, |, $(), backticks) to break out of the intended command. The affected package is coollabsio/coolify (CPE cpe:2.3:a:coollabsio:coolify).
RemediationAI
Vendor-released patch: upgrade Coolify to 4.0.0-beta.471 or later, which adds sanitization/escaping of the container ID parameter in the Server\Resources Livewire component (see PR 9172 and commit 944a038 referenced in advisory GHSA-rh5x-qx77-fq9v). This is the primary and only complete fix. If you cannot upgrade immediately, reduce exposure by tightly restricting team membership - remove or downgrade any non-essential team members and treat every team account as capable of full server RCE, since the vulnerability escalates any team member to arbitrary command execution. Additionally, place the Coolify web UI behind a VPN, IP allowlist, or reverse-proxy authentication so the Livewire endpoints are not broadly reachable, and monitor SSH command activity on managed servers for anomalous docker/container invocations; note the trade-off that network restrictions do not stop a legitimate-but-malicious team member, so upgrading remains essential. Advisory and patch: https://github.com/coollabsio/coolify/security/advisories/GHSA-rh5x-qx77-fq9v and https://github.com/coollabsio/coolify/releases/tag/v4.0.0-beta.471.
Coolify, a self-hosted server management platform, allows authenticated users to inject OS commands through the Git Repo
A command injection vulnerability in Coolify's Database Backup functionality allows authenticated users with application
Coolify through v4.0.0-beta.434 exposes the root user's SSH private key to low-privileged team members. Any user with ba
Cross-team authorization bypass in Coolify (open-source self-hosted PaaS) before 4.0.0-beta.474 allows an authenticated,
Coolify before 4.0.0-beta.445 allows command injection through docker-compose.yaml parameters. If a victim creates an ap
Coolify versions prior to v4.0.0-beta.420.7 are vulnerable to a remote code execution vulnerability in the project deplo
Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a remote code execution vulnerability in the application d
Authenticated OS command injection in Coolify before 4.0.0-beta.471 lets any user holding destination management permiss
Authenticated remote code execution in Coolify (self-hosted PaaS) before 4.0.0-beta.470 lets a low-privileged authentica
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. [CVSS 8.8 HIGH]
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0
An authenticated command injection vulnerability in Coolify's PostgreSQL initialization script handling allows attackers
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today