Coolify · Coolify · CVE-2026-34047
**Name of the Vulnerable Software and Affected Versions**
Coolify versions prior to 4.0.0-beta.471
**Description**
Terminal WebSocket bootstrap routes fail to enforce the required authorization middleware. This allows an authenticated user to access terminal functionality for resources beyond their authorized scope, potentially enabling the execution of unauthorized commands.
**Recommendations**
Update to version 4.0.0-beta.471.