Self-Hosters Beware: 3 Critical Coolify Flaws Grant Root Access

Security researchers disclosed three critical Coolify vulnerabilities—two command-injection flaws and one private SSH key disclosure—that allow low-privileged users or malicious repositories to execute arbitrary commands as root or obtain SSH keys, with roughly 52,000 exposed instances worldwide; administrators are urged to upgrade to patched versions immediately.