GrepRules
Sign inPublish rule
Explore/cve-2025-22608-coolify-unsafe-shell-command-interpolation

CVE-2025-22608: Coolify Unsafe Shell Command Interpolation

Variables are interpolated into remote execution strings without proper sanitization. Weak `startsWith` validation doesn't prevent shell injection. Use `escapeshellarg()` or robust validations.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0PHPβ
greprules fetch cve-2025-22608-coolify-unsafe-shell-command-interpolation --engine opengrep

Description

Variables are interpolated into remote execution strings without proper sanitization. Weak `startsWith` validation doesn't prevent shell injection. Use `escapeshellarg()` or robust validations.

License
Apache-2.0
Source context
Public repository
Source
Provally CVE rule catalog
Validation status
Verified
Quality signals
145 downloads0 direct145 via packs
· 0 stars · Quality score 70How quality works
Included packs
2 packs