CVE-2026-27883

MEDIUM

Coolify: IDOR in Deployment API - Cross-Team Deployment Information Disclosure

Title source: cna
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2026-27883. PoCs published by HermesNA-1.

AI-analyzed exploit summary This repository contains an auto-generated stub module for CVE-2026-27883, an authentication bypass vulnerability in Coolify's API endpoint `GET /api/v1/deployments/{uuid}`. The code includes placeholder methods (`check`, `run`) but lacks actual exploit implementation, referencing only advisory links without technical details or PoC logic.

Description

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.464, the `GET /api/v1/deployments/{uuid}` endpoint allows any authenticated user to access deployment details belonging to any team, bypassing team-based authorization. The $teamId is extracted from the authentication token but never used to scope the database query. This vulnerability is fixed in 4.0.0-beta.464.

Exploits (1)

github STUB 1 stars
by HermesNA-1 · pythonpoc
https://github.com/HermesNA-1/SnakeSploit/tree/main/data/modules_generated/cve-2026-27883_coolify_open-source.py

This repository contains an auto-generated stub module for CVE-2026-27883, an authentication bypass vulnerability in Coolify's API endpoint `GET /api/v1/deployments/{uuid}`. The code includes placeholder methods (`check`, `run`) but lacks actual exploit implementation, referencing only advisory links without technical details or PoC logic.

Classification
Stub 99%
Attack Type
Auth Bypass
Complexity
Moderate
Reliability
Theoretical
Target: Coolify prior to 4.0.0-beta.464
Auth required
Prerequisites: Authenticated user access (though the vulnerability allows unauthorized access to deployment data) · Network access to the Coolify API endpoint
mistral-large-3 · analyzed Jul 09, 2026 Full analysis →

References (1)

Core 1
Core References

Scores

CVSS v3 5.0
EPSS 0.0021
EPSS Percentile 11.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-639
Status published
Products (1)
coollabsio/coolify < 4.0.0-beta.464
Published Jun 30, 2026
Tracked Since Jun 30, 2026