Horizon Alert
Summary of the vulnerability and why it matters
A vulnerability exists in Coolify's database import functionality that could allow authenticated users to execute commands on managed servers. This issue affects versions prior to 4.0.0-beta.451, and the primary concern is to confirm if this technology is in use and if so, to verify exposure.
- Authenticated users can run commands as root.
- It impacts server management tools used by the organization.
- Confirm relevance and exposure for affected systems.
Attack Path
How an attacker could exploit the issue
An attacker could exploit this vulnerability by leveraging their existing authenticated access to the Coolify application. Once authenticated with sufficient permissions to manage applications or services, they can craft a malicious database name during an import operation. This specially designed name will then be executed as a command on the server, allowing the attacker to run arbitrary code with root privileges.
- Authenticated access to application management.
- Malicious database name in import function.
- Arbitrary command execution as root.
Live Threat
Current exploitation, exposure, and threat context
This vulnerability in Coolify's database import feature could allow an authenticated user with management permissions to execute arbitrary commands as root on the server. This is possible because database names are inserted directly into shell commands without proper validation, potentially leading to unauthorized system access and control.
- Managed server root access.
- Unsanitized database names in commands.
- Complete server compromise.
Operational Fix
Recommended remediation, mitigation, and detection steps
Coolify's self-hosted nature means that application or platform owners are likely responsible for managing its security. The first step is to identify all instances of Coolify, confirm their accessibility and criticality, and then assign ownership for remediation.
- Application or platform owners should investigate.
- Verify Coolify's network exposure and criticality.
- Plan and execute remediation based on risk.
