Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, Coolify server and project lookups are not scoped to the current team, allowing any authenticated user to access servers and projects belonging to other teams by specifying their IDs directly. This vulnerability is fixed in 4.0.0-beta.471.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-29 | 2 | General1Patch1 |
| 2026-06-30 | 1 | Disclosure1 |
CVE-2026-34592 Unauthorized Cross-Team Access to Servers and Projects in Coolify Before 4.0.0-beta.471 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-34592
Post summary
The post announces CVE-2026-34592, describing unauthorized cross-team access in Coolify before version 4.0.0-beta.471, with no mentions of PoC, exploit code, active exploitation, or mitigation.
🚨*CVE* CVE-2026-34592 Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, Coolify server and project lookups are no… https://www.cve.org/CVERecord?id=CVE-2026-34592 ----- Traducción: CVE-2026-34592 Coo… http://infoflow.cloud`
Post summary
The post simply announces CVE-2026-34592 for Coolify and links to the CVE record, without providing technical details or remediation information.
CVE-2026-34592 Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, Coolify server and project lookups are no… https://www.cve.org/CVERecord?id=CVE-2026-34592
Post summary
The CVE affects Coolify and has been addressed in version 4.0.0-beta.471, but no PoC, exploit, or active exploitation details are provided.