Executive Summary

This vulnerability affects Coolify versions prior to v4.0.0-beta.420.6 and allows authenticated users with low-level member privileges to execute remote code. Specifically, these users can inject arbitrary Docker Compose directives during project creation. By creating a malicious service definition that mounts the host root filesystem, an attacker can gain full root access to the underlying server.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to a complete compromise of the server running Coolify. An attacker with low-level privileges can escalate their access to full root access, potentially allowing them to control the server, access sensitive data, modify or delete files, and disrupt services.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade Coolify to version 4.0.0-beta.420.6 or later to fix the remote code execution vulnerability. Additionally, restrict authenticated user privileges to prevent low-level members from injecting arbitrary Docker Compose directives during project creation.

Useful 0 Not Useful 0