https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T16:53:43.816447+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-84694 fkie_cve-2026-84694 2026-10-01T16:53:43.819410+00:00

Coolify before 4.2.0 fails to properly escape environment variable key names in Docker commands executed over SSH on managed servers. Authenticated attackers can inject shell metacharacters into environment variable keys to execute arbitrary commands on the server host outside containers.

 https://vulnerability.circl.lu/vuln/ghsa-xf4v-vq77-2rgv GHSA-xf4v-vq77-2rgv 2026-10-01T16:53:43.819523+00:00

Coolify before 4.2.0 fails to properly escape environment variable key names in Docker commands executed over SSH on managed servers. Authenticated attackers can inject shell metacharacters into environment variable keys to execute arbitrary commands on the server host outside containers.