COOLIFY DISCLOSES 11 CRITICAL FLAWS ENABLING FULL SERVER COMPROMISE ON SELF-HOSTED INSTANCES

Summary from the TLDR InfoSec newsletter

Cybersecurity researchers reveal 11 critical vulnerabilities in Coolify, a popular self‑hosting platform, that enable authenticated low‑privileged users to achieve root command execution, escape containers, and even obtain the server's root SSH key, potentially compromising entire infrastructures.