Ccoder

Products

Exploited and recent CVEs

• CVE-2026-121967 Medium 4.9 Coder before 2.29.22, 2.34.13, 2.35.10, 2.36.8, 2.37.5, and 2.38.1 AI Gateway Path Traversal 0.3%
• CVE-2026-118687 Medium 6.5 Coder before 2.29.21, 2.34.12, 2.35.9, 2.36.7, and 2.37.4 Missing Audience Validation in GCP Instance-Identity Authentication 0.2%
• CVE-2026-111934 Low 3.7 Coder before 2.34.7 IP Spoofing via X-Forwarded-For Header 0.1%
• CVE-2026-111933 Low 3.7 Coder before 2.34.2 User Enumeration via Login Placeholder Hash 0.2%
• CVE-2026-111932 Low 3.4 Coder before 2.34.2 Stored HTML Injection via Appearance Settings 0.2%
• CVE-2026-111931 Medium 4.3 Coder 2.0.0 before 2.34.8 Open Redirect via Workspace App Proxy 0.2%
• CVE-2026-111930 Medium 4.3 Coder from 2.26.0 before 2.34.8 Information Disclosure via Workspace ACL Endpoint 0.2%
• CVE-2026-111929 Medium 5.3 Coder 2.30.0 before 2.34.8 Cross-Organization File Disclosure via DownloadFile RPC 0.2%
• CVE-2026-111928 Medium 5.4 Coder 2.0.0 before 2.34.8 Authorization Bypass via User-Level ACL in RBAC Policy 0.1%
• CVE-2026-111927 High 7.7 Coder before 2.35.4 Credential Theft via Workspace Proxy Hostname Prefix Match 0.2%
• CVE-2026-111926 Low 3.3 Coder from 2.10.0 before 2.34.8 Information Disclosure via Agent /debug/manifest 0.1%
• CVE-2025-71435 Medium 4.2 Coder before 2.23.0 Session Expiration Bypass via OIDC Without Refresh Token 0.2%
• CVE-2024-58398 Medium 4.3 Coder 2.3.1 before 2.16.1 Open Redirect via Login Page redirect Parameter 0.3%
• CVE-2026-63443 High 8.3 Coder: Workspace agent API insecure redirect handling allowed cross-agent file read and write 0.8%
• CVE-2026-55438 Medium 5.8 Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing 0.2%
• CVE-2026-55437 Medium 5.4 Coder vulnerable to stored HTML injection via workspace agent logs in AgentLogLine component 0.3%
• CVE-2026-55436 High 7.4 Coder's AI Bridge Proxy skips TLS certificate verification in default configuration 0.3%
• CVE-2026-55433 Medium 5.4 Coder: Devcontainer recreate endpoint missing write authorization allows read-only roles to destroy containers 0.4%
• CVE-2026-55432 Medium 5.4 Coder's sub-agent app registration bypasses template port-sharing policy enforcement 0.3%
• CVE-2026-55431 High 7.7 Coder's session token leaked to arbitrary hosts via `coder open app` for external workspace apps 0.3%
• CVE-2026-55430 Medium 5.8 Coder's subdomain workspace app routing trusts unauthenticated X-Forwarded-Host header, enabling cross-app data access 0.2%
• CVE-2026-55429 High 8.7 Coder's workspace app upsert allows cross-workspace agent rebinding via user-controlled app ID 0.5%
• CVE-2026-55428 High 8.2 Coder: Route hijacking through lack of validation of agent-supplied AllowedIPs in tailnet coordinator 0.4%
• CVE-2026-55427 High 8.3 Coder vulnerable to SSH config injection via unsanitized server-supplied values in `coder config-ssh` 0.5%
• CVE-2026-55079 Medium 4.9 Coder's unbounded memory allocation in provisioner file upload allows authenticated denial of service 0.6%
• CVE-2026-55078 Medium 6.5 Coder: Zip upload decompression lacks aggregate size limit, enabling denial of service 0.6%
• CVE-2026-55077 High 7.2 Coder: User-admin role can reset owner account password 0.6%
• CVE-2026-55076 High 7.4 Coder's OIDC email_verified type coercion bypass enables account takeover via unverified email linking 0.6%
• CVE-2026-55075 High 7.4 Coder vulnerable to OIDC account takeover via email-based user matching and email_verified bypass 0.5%
• CVE-2026-46354 Critical 9.1 Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft 0.3%