By vendor

Coder vulnerabilities

Known CVEs affecting Coder products, prioritized by severity, with SEC.co remediation and detection guidance.

19 published vulnerabilities

• CVE-2026-55429HIGH 8.7

  Coder, a platform for provisioning remote development environments, contains a critical flaw in how it manages workspace applications and their associated agents. When Coder provisions infrastructure via Terraform, two code paths fail to properly validate ownership of resources: the upsert logic overwrites agent assignments without checking workspace boundaries, and the job completion handler accepts agent IDs without verifying they belong to the workspace being built. An attacker with template author or provisioner operator privileges could exploit this to reassign agents across workspaces, potentially gaining unauthorized access to development environments and sensitive resources. The vulnerability is now fixed in recent patch releases.

• CVE-2026-55427HIGH 8.3

  Coder, a platform that helps organizations set up remote development environments, has a vulnerability in versions prior to 2.29.7, 2.32.7, 2.33.8, and 2.34.2. The `coder config-ssh` command copies SSH configuration settings from the Coder server to a developer's local SSH config file without properly validating those settings. An attacker who controls or compromises the Coder server could inject malicious SSH configuration directives—including arbitrary commands—by embedding special characters into fields that get written to the user's SSH config. This could lead to remote code execution when the developer connects via SSH. Exploitation requires either server compromise, administrator access to specific settings, or a network position to intercept communications.

• CVE-2026-55428HIGH 8.2

  Coder, a platform for provisioning remote development environments via Terraform, contains a validation gap that allows authenticated agents to inject arbitrary IP ranges into the WireGuard tunnel configuration of other agents. An attacker with valid credentials can manipulate the `AllowedIPs` field to route network traffic through their controlled agent, potentially intercepting or redirecting communications intended for legitimate development environments. This is a cross-tenant risk in multi-user deployments where agents from different organizations or teams share a tailnet coordinator.

• CVE-2026-44454HIGH 8.1

  Coder is a platform that lets organizations set up remote development environments through Terraform automation. A vulnerability in versions before 2.29.7 and 2.30.2 allowed attackers to run arbitrary code inside provisioned workspaces by injecting shell commands into the dotfiles configuration. An attacker could craft a special URL that automatically provisions a workspace with malicious code, requiring only a user click—no explicit confirmation needed. Coder fixed this by validating user input and removing unsafe shell execution patterns.

• CVE-2026-55431HIGH 7.7

  Coder's `coder open app` command, which helps developers quickly access workspace applications, has a credential exposure vulnerability. When a user runs this command on a workspace with a malicious app definition, the CLI can be tricked into opening a URL that contains their session token—the authentication credential that proves they're logged in. An attacker who controls a workspace's app template can craft a URL that captures this token, potentially gaining unauthorized access to the user's Coder account and resources. The vulnerability affects Coder versions before 2.29.7, 2.32.7, 2.33.8, and 2.34.2.

• CVE-2026-55075HIGH 7.4

  Coder, a platform for provisioning remote development environments via Terraform, contains two authentication bypass flaws in its OIDC (OpenID Connect) login flow that can chain together to enable account takeover. The vulnerabilities stem from overly permissive email-based user matching and improper handling of email verification claims. An attacker can exploit these weaknesses to gain unauthorized access to existing user accounts without knowing the victim's password. Affected versions are those prior to 2.29.7, 2.32.7, 2.33.8, and 2.34.2. The vendor has released patches that restrict email fallback linking and enforce stricter email verification defaults.

• CVE-2026-55076HIGH 7.4

  Coder, a platform for provisioning remote development environments, contains an authentication bypass vulnerability in versions prior to 2.29.7, 2.32.7, 2.33.8, and 2.34.2. The flaw stems from improper validation of the `email_verified` claim returned by OpenID Connect (OIDC) identity providers. When an IdP returns this claim in an unexpected format (such as a string instead of a boolean) or omits it entirely, Coder's authentication logic fails in an unsafe way—treating the email as verified regardless. This, combined with a fallback mechanism that links accounts based on email alone, allows an attacker to take over existing user accounts by authenticating through an OIDC provider they control.

• CVE-2026-55436HIGH 7.4

  Coder, a platform for provisioning remote development environments, contains a transport security misconfiguration in its AI Bridge Proxy component. Versions 2.30.0 through 2.34.1 fail to validate TLS certificates when communicating with the main Coder server in default deployments. An attacker positioned on the network path between the proxy and server could intercept and decrypt traffic. Patching to versions 2.32.7, 2.33.8, or 2.34.2 enforces strict certificate validation. Risk is substantially lower for organizations running both components on the same machine or behind mTLS.

• CVE-2026-55077HIGH 7.2

  Coder, a platform for provisioning remote development environments through Terraform, contains an authorization flaw in its password reset endpoint. An administrator with the `user-admin` role can reset the password of an owner account without providing the owner's current password—a capability that should be restricted to the owner themselves. The vulnerability is present in versions prior to 2.29.7, 2.32.7, 2.33.8, and 2.34.2. Since exploitation requires the privileged `user-admin` role, the practical risk depends on how broadly that role is distributed in your organization.

• CVE-2026-45796MEDIUM 6.5

  Coder, a platform for provisioning remote development environments, contains an unauthenticated Server-Side Request Forgery (SSRF) vulnerability in its Azure instance identity endpoint. An attacker can trick the Coder server into making HTTP requests to arbitrary internal or external hosts by submitting a specially crafted digital signature. While the attacker doesn't receive the full response from the target, error messages leaked in the API response allow reconnaissance—revealing whether a host is reachable and what type of failure occurred. This enables attackers to probe internal networks, cloud metadata endpoints, and other infrastructure without authentication.

• CVE-2026-55078MEDIUM 6.5

  Coder, a platform for provisioning remote development environments through Terraform, contains a denial-of-service flaw in its file upload API. When authenticated users upload ZIP files, the system decompresses them into memory without enforcing a total size limit—only individual file limits. An attacker with legitimate upload credentials can craft a specially-prepared ZIP to consume all available memory, crashing the service. The flaw affects versions 2.17.0 through 2.34.1; patched versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2 are now available.

• CVE-2026-55434MEDIUM 6.5

  Coder, a platform that manages remote development environments through Terraform, contains a memory exhaustion vulnerability in its AI Bridge feature. An authenticated user with access to AI Bridge endpoints can send unusually large requests that cause the application to consume excessive memory, rendering the service unavailable. The vulnerability affects versions 2.33.0 through 2.33.7 and 2.34.0 through 2.34.1. Patched versions 2.33.8 and 2.34.2 are available.

• CVE-2026-55430MEDIUM 5.8

  Coder, a platform for provisioning remote development environments, contains a host-header validation weakness in its workspace app proxy that allows an authenticated user to redirect traffic intended for one application to a different application within the same Coder deployment. An attacker can exploit this by crafting a malicious link to a shared app and manipulating the `X-Forwarded-Host` HTTP header—something JavaScript running in a browser can do natively. The vulnerability requires specific configuration (subdomain-based app routing) and depends on the upstream infrastructure not filtering this header. Versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2 fix the issue by validating the header only from trusted proxies.

• CVE-2026-55438MEDIUM 5.8

  Coder, a platform for provisioning remote development environments, contains a CORS (Cross-Origin Resource Sharing) bypass vulnerability in its workspace app proxy. The flaw allows an attacker to craft a malicious URL that tricks the CORS validation logic into approving cross-origin requests it should reject. This only works when the workspace identifier in the subdomain can be parsed as a UUID and the attacker can convince an authenticated user to visit their crafted link. The vulnerability requires subdomain-based app routing to be enabled and direct user interaction—it does not represent a silent or automatic compromise. Coder has patched this in recent maintenance releases across all supported version branches.

• CVE-2026-55432MEDIUM 5.4

  Coder, a platform for provisioning remote development environments, contains a flaw in how it handles app sharing permissions within workspaces. When workspace owners create sub-agent applications, the system fails to enforce the administrator-set sharing level limits before saving these apps. This allows a workspace owner to grant broader access to their applications than the organization's policy permits. Attackers must already have workspace owner privileges to exploit this issue, which limits the immediate blast radius but represents a meaningful policy bypass for organizations using Coder to control data exposure.

• CVE-2026-55433MEDIUM 5.4

  Coder, a platform for provisioning remote development environments, contains an authorization flaw in its devcontainer rebuild feature. Attackers with valid low-privilege workspace access can trigger a destructive environment rebuild without the proper permission checks, leading to loss of work and service disruption. The vulnerability affects Coder versions before 2.29.7, 2.32.7, 2.33.8, and 2.34.2. A fix has been released that adds the missing authorization validation.

• CVE-2026-55435MEDIUM 5.4

  Coder, a platform for provisioning remote development environments via Terraform, has a flaw in how it validates user access to AI Bridge proxy endpoints. The vulnerability allows users whose accounts have been suspended to continue using previously-issued API keys to access those endpoints, because the suspension process doesn't automatically revoke existing tokens. The issue affects Coder versions 2.30.0 through 2.34.1. While this is a real access-control bypass, its practical scope is narrow: it only impacts API keys that were issued before a user's account was suspended, and only until those keys are manually deleted. In most organizations, suspended users have limited outstanding valid keys, and the keys themselves expire over time.

• CVE-2026-55437MEDIUM 5.4

  Coder, a platform for provisioning remote development environments, contains a stored cross-site scripting (XSS) vulnerability in its dashboard logging component. When workspace agent logs contain HTML or script code, the dashboard renders this content as live markup rather than displaying it as plain text. An attacker who can control what appears in agent logs can inject malicious scripts that execute in the browser of any user viewing those logs. This requires the attacker to first compromise or control a workspace agent, then trick an administrator or developer into viewing the poisoned logs.

• CVE-2026-55079MEDIUM 4.9

  Coder, a platform for provisioning remote development environments via Terraform, contains a memory exhaustion vulnerability in its provisioner daemon. When clients upload files, the daemon fails to validate the claimed file size before allocating memory, allowing an authenticated attacker to trigger out-of-memory conditions by claiming extremely large file sizes. The vulnerability affects versions 2.24.0 through 2.34.1 across multiple release branches, and has been patched in versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2.