CVE-2026-15507 – coollabsio Coolify Policy Policies authorization

CVE ID :CVE-2026-15507

Published : July 12, 2026, 10:16 p.m. | 1 hour, 13 minutes ago

Description :A vulnerability was detected in coollabsio Coolify up to 4.1.1. The impacted element is an unknown function of the file /app/Policies/ of the component Policy Handler. Performing a manipulation results in missing authorization. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Severity: 6.5 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…