CVE-2026-84694

8.8 Élevée

Publiée le 02/09/2026 à 03:17 · Modifiée le 10/09/2026 à 17:53 · Analyse NVD reportée · Source : disclosure@vulncheck.com

Description

Coolify before 4.2.0 fails to properly escape environment variable key names in Docker commands executed over SSH on managed servers. Authenticated attackers can inject shell metacharacters into environment variable keys to execute arbitrary commands on the server host outside containers.

Traduire en français

Produits concernés

coollabsio coolify

Scores CVSS

Version	Score	Source	Vecteur
4.0	8.7 Élevée	disclosure@vulncheck.com	`CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X`
3.1	8.8 Élevée	disclosure@vulncheck.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-78

Références

https://github.com/coollabsio/coolify
https://github.com/coollabsio/coolify/blob/v4.1.2/app/Policies/ApplicationPolicy.php
https://github.com/coollabsio/coolify/blob/v4.1.2/app/Support/ValidationPatterns.php
https://github.com/coollabsio/coolify/commit/b50839d4515b115b7ded5db609471440249995da
https://github.com/coollabsio/coolify/releases/tag/v4.2.0
https://www.vulncheck.com/advisories/coolify-before-4.2.0-remote-code-execution-via-environment-variable-key

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories