Coolify Reveals 11 Security Flaws in Self-Hosted Instances

Cybersecurity Vulnerabilities in Coolify

Cybersecurity researchers have identified multiple critical vulnerabilities in Coolify, an open-source self-hosting platform, posing risks of authentication bypass and remote code execution. Notably, CVE-2025-66209 has a CVSS score of 10.0, stemming from a command injection flaw in the database backup feature, allowing any authenticated user to exploit it. These security flaws highlight the need for immediate attention and remediation to protect users. The issues underscore the ongoing challenges in securing self-hosted platforms against potential threats.

Want More Context? 🔎