Improper Access Control in Coolify Affects Server and Project Management

CVE-2026-34592

What is CVE-2026-34592?

Coolify, an open-source tool for managing servers, applications, and databases, contains a significant vulnerability that allows authenticated users to access and manipulate servers and projects belonging to other teams. This issue arises from inadequate scoping of server and project lookups, enabling any user with the proper ID to gain unauthorized access. The vulnerability was addressed and resolved in version 4.0.0-beta.471, which enforces proper access controls to protect team-specific information. For detailed information, visit the advisory link.

References