https://cvebrief.com/archive/cves/vendor/coollabsio/ High and critical coollabsio vulnerabilities covered by CVE Brief, with independent analyst commentary. en-us Sun, 06 Sep 2026 12:00:00 GMT https://cvebrief.com/cve/cve-2026-86117/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-86117 Sun, 06 Sep 2026 12:00:00 GMT Coolify through 4.3.17 contains an authentication bypass vulnerability in the OAuth callback handler that signs users into existing accounts based solely on email address without verifying provider assertions or binding OAuth identities. Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-84694/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-84694 Wed, 02 Sep 2026 12:00:00 GMT Coolify before 4.2.0 fails to properly escape environment variable key names in Docker commands executed over SSH on managed servers. Fix documented: 4.2.0 (CVE record). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-59734/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-59734 Fri, 10 Jul 2026 12:00:00 GMT Coolify is an open-source and self-hostable tool for managing servers, applications, and databases Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-34034/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-34034 Tue, 07 Jul 2026 12:00:00 GMT Coolify is an open-source and self-hostable tool for managing servers, applications, and databases Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-34035/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-34035 Tue, 07 Jul 2026 12:00:00 GMT Coolify is an open-source and self-hostable tool for managing servers, applications, and databases Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-34037/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-34037 Tue, 07 Jul 2026 12:00:00 GMT An authorization bypass vulnerability in Coolify allows authenticated users to access and manipulate resources belonging to other tenants. Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-34038/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-34038 Tue, 07 Jul 2026 12:00:00 GMT Coolify contains an authenticated remote command injection vulnerability in application deployment handling, allowing remote code execution and sensitive data exfiltration. Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-34044/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-34044 Tue, 07 Jul 2026 12:00:00 GMT Coolify is an open-source and self-hostable tool for managing servers, applications, and databases Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-34047/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-34047 Tue, 07 Jul 2026 12:00:00 GMT Coolify terminal WebSocket routes fail to enforce authorization, allowing authenticated users to access and execute commands on unauthorized resources. Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-34048/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-34048 Tue, 07 Jul 2026 12:00:00 GMT Coolify terminal WebSocket routes fail to enforce team-based authorization, enabling low-privileged team members to execute commands on servers belonging to other teams. Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-34057/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-34057 Tue, 07 Jul 2026 12:00:00 GMT Coolify is an open-source and self-hostable tool for managing servers, applications, and databases Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-34058/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-34058 Tue, 07 Jul 2026 12:00:00 GMT Coolify is an open-source and self-hostable tool for managing servers, applications, and databases Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-34152/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-34152 Tue, 07 Jul 2026 12:00:00 GMT Coolify is an open-source and self-hostable tool for managing servers, applications, and databases Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-34153/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-34153 Tue, 07 Jul 2026 12:00:00 GMT Coolify is an open-source and self-hostable tool for managing servers, applications, and databases Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-34158/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-34158 Tue, 07 Jul 2026 12:00:00 GMT Coolify is an open-source and self-hostable tool for managing servers, applications, and databases Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-34168/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-34168 Tue, 07 Jul 2026 12:00:00 GMT Coolify is an open-source and self-hostable tool for managing servers, applications, and databases Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-34171/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-34171 Tue, 07 Jul 2026 12:00:00 GMT Coolify is an open-source and self-hostable tool for managing servers, applications, and databases Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-34599/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-34599 Tue, 07 Jul 2026 12:00:00 GMT Coolify is an open-source and self-hostable tool for managing servers, applications, and databases Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-42143/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-42143 Tue, 07 Jul 2026 12:00:00 GMT Coolify is an open-source and self-hostable tool for managing servers, applications, and databases Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-42153/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-42153 Tue, 07 Jul 2026 12:00:00 GMT Coolify is an open-source and self-hostable tool for managing servers, applications, and databases Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-42200/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-42200 Tue, 07 Jul 2026 12:00:00 GMT Coolify is an open-source and self-hostable tool for managing servers, applications, and databases Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-42204/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-42204 Tue, 07 Jul 2026 12:00:00 GMT Coolify is an open-source and self-hostable tool for managing servers, applications, and databases Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-27957/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-27957 Wed, 01 Jul 2026 12:00:00 GMT Coolify is an open-source and self-hostable tool for managing servers, applications, and databases Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-34592/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-34592 Tue, 30 Jun 2026 12:00:00 GMT Coolify is an open-source and self-hostable tool for managing servers, applications, and databases Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-34594/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-34594 Tue, 30 Jun 2026 12:00:00 GMT Coolify is an open-source and self-hostable tool for managing servers, applications, and databases Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-34597/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-34597 Tue, 30 Jun 2026 12:00:00 GMT Coolify is an open-source and self-hostable tool for managing servers, applications, and databases Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-41896/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-41896 Tue, 30 Jun 2026 12:00:00 GMT Coolify is an open-source and self-hostable tool for managing servers, applications, and databases Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2026-57498/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2026-57498 Tue, 30 Jun 2026 12:00:00 GMT Coolify versions prior to 4.0.0-beta.474 contain an authorization flaw where Livewire web UI components fail to validate resource ownership, enabling cross-team resource manipulation. Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-59157/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2025-59157 Tue, 06 Jan 2026 12:00:00 GMT Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-64419/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2025-64419 Tue, 06 Jan 2026 12:00:00 GMT Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Fix documented (OSV.dev). Independent analyst report on CVE Brief. https://cvebrief.com/cve/cve-2025-64420/?utm_source=cvebrief&utm_medium=rss&utm_campaign=vendor-feed cvebrief-coollabsio-CVE-2025-64420 Tue, 06 Jan 2026 12:00:00 GMT Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Fix documented (OSV.dev). Independent analyst report on CVE Brief.