Coolify
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 35 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 24, 2025 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Coolify: OS Command Injection in Health Check Configuration Allows Remote Code Execution
Coolify: Missing authorization on terminal websocket bootstrap routes allows low-privileged members to execute commands on team servers
Coolify: OS Command Injection via Persistent Volume Names - Root RCE on Managed Servers
Coolify: Cross-team IDOR in logs component (resource lookup not team-scoped)
Coolify: Account takeover via CSRF-able GET endpoint that resets password to attacker-known value
Coolify: OS Command Injection via Unmanaged Container Operations - Remote Code Execution
Coolify: WebSocket Endpoint Access Control Flaw Leading to Remote Code Execution
Coolify: PostgreSQL Init Script Path Traversal Leads to Arbitrary File Write and Root RCE
Coolify: PostgreSQL Healthcheck Command Injection Allows Root Code Execution in Container
Coolify: Cross-tenant activity log disclosure via unlocked Livewire property in ActivityMonitor
Monitor Coolify in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.