PT-2026-56133 · Coolify · Coolify
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Coolify versions prior to 4.0.0-beta.471
Description
The Livewire component
ServerResources exposes public methods startUnmanaged(), stopUnmanaged(), and restartUnmanaged() that accept a container ID parameter directly from the browser without sanitization or escaping. This parameter is interpolated into shell commands executed via SSH on managed servers, allowing authenticated team members to execute arbitrary OS commands on remote servers.Recommendations
Update to version 4.0.0-beta.471.
Exploit
Fix
RCE
OS Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Coolify