CVE-2026-27883 | coollabsio coolify up to 4.0.0-beta.463 /api/v1/deployments teamId authorization (GHSA-f6h4-qx26-76jv)

June 30, 2026 Yanac

A vulnerability categorized as problematic has been discovered in coollabsio coolify up to 4.0.0-beta.463. This affects an unknown function of the file /api/v1/deployments. The manipulation of the argument teamId results in authorization bypass.

This vulnerability is cataloged as CVE-2026-27883. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More