Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-34161 — Authenticated low-privileged RCE in Coolify via unsanitized shell commands in the Git Repository field. | Kitploit
Tools/GitHubGitHub/eyodav/cve-2025-34161
Vulnerability AnalysisCode AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & Education
GitHubeyodav/cve-2025-34161

CVE-2025-34161

Authenticated low-privileged RCE in Coolify via unsanitized shell commands in the Git Repository field.

View Repository
11210 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
FieldValue
CVE IDCVE-2025-34161
AffectedCoolify <= v4.0.0-beta.420.6
Fixed inv4.0.0-beta.420.7
SeverityCritical
CVSS 4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CWECWE-78 (OS Command Injection)

Summary

Coolify versions prior to and including v4.0.0-beta.420.6 are vulnerable to a critical remote code execution (RCE) flaw in the project deployment workflow. The platform allows authenticated users, with low-level privileges, to inject arbitrary shell commands via the Git Repository URL field during project creation. By submitting a crafted repository string containing command injection syntax, an attacker can execute arbitrary commands on the underlying host system, resulting in full server compromise.

Impact

  • Remote Code Execution (RCE)
  • Privilege escalation from low-level user to full host compromise
  • Complete loss of confidentiality, integrity, and availability

Steps to Reproduce

  1. Login as a low-privileged user
  2. Create a new project
  3. Select private GIT
  4. Insert a malicious payload in the Git Repository URL field (e.g. [email protected]:fake/repo.git; cat /etc/passwd #;)
  5. Deploy the project → observe arbitrary command execution in the log

References

  • CVE Record - CVE-2025-34161
Download Tool