| Package | Affected versions | Patched versions |
|---|---|---|
| coolify | = 4.0.0< 4.0.0 | 4.0.0 |
Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a remote code execution vulnerability in the application deployment workflow. The platform allows authenticated users, with low-level member privileges, to inject arbitrary Docker Compose directives during project creation. By crafting a malicious service definition that mounts the host root filesystem, an attacker can gain full root access to the underlying server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free