Coollabsio vulnerabilities
76 CVEs and advisories name Coollabsio as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-59157Coolify has Git Repository RCE
- CVE-2025-59156Coolify has Docker Compose Injection issue
- CVE-2025-66213Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in File Storage Directory Mount Path
- CVE-2025-66212Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Dynamic Proxy Configuration Filename
- CVE-2025-66211Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in PostgreSQL Init Script Filename
- CVE-2025-66210Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Import
- CVE-2025-66209Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Backup
- CVE-2025-24025Coolify Vulnerable to Reflected XSS on Tag Search
- CVE-2025-22612Coolify Vulnerable to Private Key Enumeration on Onboarding resulting in Remote Command Execution (RCE)
- CVE-2025-22611Coolify vulnerable to Privilege Escalation resulting in Remote Command Execution (RCE)
- CVE-2025-22610Coolify Vulnerable to OAuth Secrets Leak
- CVE-2025-22609Coolify Vulnerable to Private Key Hijacking / Remote Command Execution (RCE)
- CVE-2025-22608Coolify Vulnerable to Revocation of Arbitrary Team Invitations (DOS)
- CVE-2025-22607Coolify Vulnerable to GitHub / GitLab OAuth Secrets Leak
- CVE-2025-22606Coolify Command Injection Vulnerability in Project Name
- CVE-2025-22605Coolify OS Command Injection Vulnerability in SSH Command Generation