CVE-2026-34047 Details
Description
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, terminal WebSocket bootstrap routes did not enforce the expected authorization middleware, allowing an authenticated user to access terminal functionality for resources outside the authorized scope and potentially execute commands. This issue is fixed in version 4.0.0-beta.471.
A critical authorization bypass vulnerability has been identified in Coolify versions through 4.0.0-beta.470. The issue arises in the terminal WebSocket bootstrap routes, which failed to enforce proper authorization. This flaw allows low-privileged authenticated users to access terminal functionalities for resources beyond their authorized scope and potentially execute commands on the underlying server. Exploitation of this vulnerability could lead to unauthorized access to sensitive data, such as SSH private keys, and allow execution of arbitrary commands as the root user, compromising the entire host.
Users can update to Coolify version 4.0.0-beta.471 or later, where this vulnerability has been patched.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 7, 2026CISA-ADP
Assessed Jul 7, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/coollabsio/coolify/security/advisories/GHSA-652w-qv22-2r7c | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/coollabsio/coolify/commit/bc91b41f92f1bbb53886a5d7a60335cbf1621cd5 | [email protected] | Source CodeVendor |
| https://github.com/coollabsio/coolify/pull/9169 | [email protected] | Issue TrackingVendor |
| https://github.com/coollabsio/coolify/releases/tag/v4.0.0-beta.471 | [email protected] | Release NotesVendor |
| https://github.com/coollabsio/coolify/security/advisories/GHSA-652w-qv22-2r7c | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-863 | Incorrect Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Coolify | <= 4.0.0-beta.470 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 7, 2026 | CVE Modified | CISA-ADP |
| Jul 7, 2026 | New CVE Received | [email protected] |