CVE-2026-34168
|
| |
|
|
Affected software |
DOCKER |
|
|
|
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the LocalPersistentVolume.name field is interpolated directly into docker volume shell commands without shell argument escaping, allowing an authenticated user to set a storage name containing shell metacharacters and execute commands on managed servers when the resource is deleted. This issue is fixed in version 4.0.0-beta.471. |
Link: |
| https://nvd.nist.gov/vuln/detail/CVE-2026-34168 |
