coollabsio Coolify

4 known vulnerabilities in coollabsio Coolify, 1 critical, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-100746 CVSS 5.5 medium A vulnerability was found in coollabsio Coolify up to 4.1.0. This affects the function Github::redirect of the file…
  • CVE-2026-100744 CVSS 5.5 medium A flaw has been found in coollabsio Coolify up to 4.1.2. The affected element is an unknown function of the file…
  • CVE-2026-86117 CVSS 9.2 critical Coolify through 4.3.17 contains an authentication bypass vulnerability in the OAuth callback handler that signs users into existing…
  • CVE-2026-84694 CVSS 8.7 high Coolify before 4.2.0 fails to properly escape environment variable key names in Docker commands executed over SSH on managed servers…