Vulnerability details
CVE-2026-42200
coollabsio coolify
Coolify: PostgreSQL Init Script Path Traversal Leads to Arbitrary File Write and Root RCE
CVSS 3.1
8.8High
Official description
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, PostgreSQL initialization script (generate_init_scripts() method in app/Actions/Database/StartPostgresql.php) filename handling did not sufficiently restrict paths, allowing an authenticated user to write files outside the intended directory and achieve command execution through database initialization. This issue is fixed in version 4.0.0-beta.474.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.8High | 3.1 | CVEProject cvelistV5 (CNA) (GitHub_M) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| coollabsio | coolify | < 4.0.0-beta.474 | CVEProject cvelistV5 (CNA) |
References and advisories
4- https://github.com/coollabsio/coolify/pull/9681 x_refsource_MISC
- https://github.com/coollabsio/coolify/commit/1cf6c7d0aef8e0edb800ae43f44ded102397cb13 x_refsource_MISC
- https://github.com/coollabsio/coolify/releases/tag/v4.0.0-beta.474 x_refsource_MISC
- https://github.com/coollabsio/coolify/security/advisories/GHSA-mv4c-9x67-rrmv x_refsource_CONFIRM
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-07-07
- Last updated
- 2026-07-07
- State
- Published
- Assigner (CNA)
- GitHub_M
Exploit prediction (EPSS)
0.66%
Probability of exploitation in 30 days
51.8%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- Proof of concept
- Technical impact
- Total
Weaknesses (CWE)
- CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')