Coolify EUVD-2026-41994

Requires an authenticated Coolify account (PR:L) with access to the database import feature; the attacker triggers the flaw by supplying a malicious container name (client-controlled container/server properties) to the database import Livewire component in app/Livewire/Project/Database/Import.php. Exploitation is limited by the need for valid credentials and access to a project where a database import can be performed, and by the affected version being prior to 4.0.0-beta.471 - patched instances are not vulnerable. No user interaction from a victim and no elevated/admin privileges are needed, and the vulnerable UI must be network-reachable to the attacker.

The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U, C:H/I:H/A:H = 8.8) is internally consistent with the description: network-reachable web UI, low complexity, and only a low-privileged authenticated account required for full host compromise. The main limiting factor is PR:L - the attacker must already have a valid Coolify account with access to create/import a database, so this is not an unauthenticated internet-wide worm target; risk concentrates in multi-tenant or team deployments where lower-trust users hold accounts. No EPSS score, KEV entry, or public POC was provided, so real-world exploitation pressure appears low-to-moderate today, but the trivial exploitation mechanics (inject shell metacharacters into a name field) mean weaponization would be straightforward once details are public via the GHSA advisory and the fix commit. No signals conflict here; the primary uncertainty is exploitation prevalence, not exploitability.

An attacker with a low-privileged but valid Coolify account initiates a database import and sets the container name to a value containing shell metacharacters (e.g. a command-substitution or chained command payload). When Coolify builds and runs the import shell command, the injected payload executes with the privileges of the Coolify worker on the host, granting arbitrary command execution and potential full server takeover. No public POC is currently identified, but the attack requires no special tooling beyond the standard import UI.