CVE-2025-64419— Coolify 命令注入漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2025-64419の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Coolify vulnerable to command injection via docker-compose.yaml parameters
ソース: NVD (National Vulnerability Database)
脆弱性説明
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.445, parameters coming from docker-compose.yaml are not sanitized when used in commands. If a victim user creates an application from an attacker repository (using build pack "docker compose"), the attacker can execute commands on the Coolify instance as root. Version 4.0.0-beta.445 fixes the issue.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
在命令中使用的特殊元素转义处理不恰当(命令注入)
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Coolify 命令注入漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Coolify是coolLabs开源的一个开源和自托管的 Heroku/Netlify/Vercel 替代品。 Coolify 4.0.0-beta.445之前版本存在命令注入漏洞，该漏洞源于docker-compose.yaml参数清理不当，可能导致命令执行。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| coollabsio | coolify | < 4.0.0-beta.445 | - |
II. CVE-2025-64419の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2025-64419のインテリジェンス情報
请登录查看更多情报信息。
Same Patch Batch · coollabsio · 2026-01-05 · 11 CVEs total
| CVE-2025-64420 | 10.0 CRITICAL | Coolify members can see private key of root user |
| CVE-2025-59157 | 10.0 CRITICAL | Coolify has Git Repository RCE |
| CVE-2025-64424 | Colify has command injection vulnerability in project git source | |
| CVE-2025-64421 | Coolify has a privilege escalation - low privileged user can invite themselves as an admin | |
| CVE-2025-64423 | Coolify has a Privilege Escalation - low privileged users can see and use admin invitation | |
| CVE-2025-64422 | Rate-limit bypass on login via X-Forwarded-Host header | |
| CVE-2025-64425 | Coolify has host header injection in forgot password | |
| CVE-2025-59158 | Coolify has Stored XSS in Project Name | |
| CVE-2025-59156 | Coolify has Docker Compose Injection issue | |
| CVE-2025-59955 | Coolify leaksensitive information `email_change_code` in `/api/v1/teams/{team_id | current |
IV. 関連脆弱性
同じ製品: coolify
- CVE-2025-64425
Coolify has host header injection in forgot password - CVE-2025-64424
Colify has command injection vulnerability in project git so - CVE-2025-64423
Coolify has a Privilege Escalation - low privileged users ca - CVE-2025-64422
Rate-limit bypass on login via X-Forwarded-Host header - CVE-2025-64421
Coolify has a privilege escalation - low privileged user can
同じベンダー: coollabsio
- CVE-2025-64425
Coolify has host header injection in forgot password - CVE-2025-64424
Colify has command injection vulnerability in project git so - CVE-2025-64423
Coolify has a Privilege Escalation - low privileged users ca - CVE-2025-64422
Rate-limit bypass on login via X-Forwarded-Host header - CVE-2025-64421
Coolify has a privilege escalation - low privileged user can
同じ弱点: CWE-77
- CVE-2026-8210
aandrew-me tgpt Update helper.go helper.Update command injec - CVE-2026-42258
net-imap: Command Injection via unvalidated Symbol inputs - CVE-2026-42453
Termix: Command injection in extractArchive/compressFiles vi - CVE-2026-42271
LiteLLM: Authenticated command execution via MCP stdio test - CVE-2026-41500
electerm has Command Injection Vulnerability via runMac func
V. CVE-2025-64419へのコメント
まだコメントはありません