CVE-2026-42143

Name of the Vulnerable Software and Affected Versions Coolify versions prior to 4.0.0-beta.471

Description Coolify is an open-source tool for managing servers, applications, and databases. An authenticated member can execute commands as root on managed servers by injecting shell metacharacters into persistent volume names. This occurs because these user-controlled names are interpolated into shell commands without proper escaping or validation when volume operations are triggered.

Recommendations Update to version 4.0.0-beta.471.