Coolify: low-privileged member injects Docker Compose directives and gets root on the host

Impact

Any member with permission to create or update a project can inject arbitrary Docker Compose directives - for example a service that bind-mounts the host filesystem - and execute commands as root on the host OS, bypassing container isolation entirely. On a machine that also runs workloads, that means the lowest deployment role on the Coolify instance becomes root over everything scheduled on that host, including other tenants' containers and any credentials or model artifacts mounted into them. The deployment control plane itself is the escalation path, so restricting container capabilities downstream does not help.

Who can reach it

A remote, authenticated user holding only low-privileged member rights on the Coolify instance. No host access and no admin role needed.

What to do

Upgrade Coolify to 4.0.0-beta.420.7 or later and restart the Coolify services; the fix is in that release per the GitHub advisory. Until the upgrade, treat every member who can edit a project as equivalent to host root and cut the member list down accordingly. Rollout is a control-plane restart, not a node reboot, but any host already managed by a vulnerable instance with untrusted members should be considered compromised and rebuilt.

References

Related entries

• Kyverno: percent-encoded traversal in Policy apiCall urlPath escapes the namespace clamp to cluster adminCVE-2026-100706 · Kyverno admission controller (Policy apiCall urlPath namespace clamp)Critical
• Harbor: Hard-coded default credentials give web UI access to the whole registryCVE-2026-4404 · HarborCritical
• containerd: CRI plugin propagates unvalidated image LABEL values into container configCVE-2026-53488 · containerdCritical
• Dokploy: registry password and URL interpolated unescaped into a swarm deploy commandCVE-2026-72879 · Dokploy registry credential handling (getRegistryCommands in cluster/upload.ts)Critical
• Kyverno: overlapping PolicyExceptions let a tenant bypass an enforce-mode policyCVE-2026-84200 · Kyverno admission controller (PolicyException handling)Critical
• Kyverno: 3DES cipher suites offered on TLS endpoints expose long-lived sessions to Sweet32CVE-2023-54356 · Kyverno TLS endpoints (3DES cipher suites)Critical