CVE-2025-34157
Last modified
CVE-2025-34157 is a critical-severity vulnerability rated 9/10 on the CVSS scale. Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a stored cross-site scripting (XSS) attack in the project creation workflow. An authenticated user with low privileges can create a project with a maliciously crafted name containing embedded JavaScript. EPSS estimates a 0.45% chance of exploitation in the next 30 days.
Description
Coolify versions prior to v4.0.0-beta.420.6 are vulnerable to a stored cross-site scripting (XSS) attack in the project creation workflow. An authenticated user with low privileges can create a project with a maliciously crafted name containing embedded JavaScript. When an administrator attempts to delete the project or its associated resource, the payload executes in the admin’s browser context. This results in full compromise of the Coolify instance, including theft of API tokens, session cookies, and access to WebSocket-based terminal sessions on managed servers.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Coollabs | Coolify | < 4.0.0 | — |
| Coollabs | Coolify | 4.0.0 | Beta100 |
References
- https://coolify.io/Product
- https://github.com/Eyodav/CVE-2025-34157Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-34157?
How severe is CVE-2025-34157?
How do I fix CVE-2025-34157?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-34151A command injection vulnerability exists in the 'passwd' par…9.4
- CVE-2025-34152An unauthenticated OS command injection vulnerability exists…9.4
- CVE-2025-34153Hyland OnBase versions prior to 17.0.2.87 (other versions ma…10
- CVE-2025-34154UnForm Server Manager versions prior to 10.1.12 expose an un…9.2
- CVE-2025-34155Tibbo AggreGate Network Manager < 6.40.05 contains an observ…6.9
- CVE-2025-34156Tibbo AggreGate Network Manager < 6.40.05 exposes sensitive …6.9
- CVE-2025-34158Plex Media Server (PMS) 1.41.7.x through 1.42.0.x before 1.4…8.5
- CVE-2025-34159Coolify versions prior to v4.0.0-beta.420.6 are vulnerable t…8.8
- CVE-2025-3416A flaw was found in OpenSSL's handling of the properties arg…3.7
- CVE-2025-34160AnyShare contains a critical unauthenticated remote code exe…10
- CVE-2025-34161Coolify versions prior to v4.0.0-beta.420.7 are vulnerable t…8.8
- CVE-2025-34162An unauthenticated SQL injection vulnerability exists in the…9.3
Are you affected by CVE-2025-34157?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST