PT-2026-56130

CVE-2026-34047

Published

2026-07-07

Updated

2026-07-08

Description by

CVSS 3.1

9.9

Critical

MetricsAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Coolify versions prior to 4.0.0-beta.471

Description Terminal WebSocket bootstrap routes fail to enforce the required authorization middleware. This allows an authenticated user to access terminal functionality for resources beyond their authorized scope, potentially enabling the execution of unauthorized commands.

Recommendations Update to version 4.0.0-beta.471.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-863: Incorrect Authorization

Related identifiers

CVE-2026-34047