A flaw in to set a storage name that includes shell metacharacters in the LocalPersistentVolume.name field. When that persistent volume is deleted, Coolify interpolates the name directly into a docker volume shell command without performing any shell argument escaping, thereby enabling the execution of arbitrary shell commands on the managed server. This is an OS Command Injection vulnerability (CWE-78) that can be exploited to run any command, potentially compromising data confidentiality, integrity, and availability.

The vulnerability affects installations of Coolify by coollabsio up through version 4‑beta.470. Versions 4.0.0‑beta.471 and later include a patch that sanitizes the storage name before it is used in docker commands. Only users who have permission to delete persistent volumes are able to trigger the exploit.

The CVSS score of 8.8 indicates high severity and remote code execution potential. The EPSS score of less than 1 % signals a low likelihood of exploitation in the wild, and the vulnerability is not listed in the CISA KEV catalog. The path to exploitation requires an authenticated user with delete privileges to create a malicious volume name and then delete it; successful exploitation would result in arbitrary command execution on the host.