https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-55438.htmlhttps://patchthecve.com/cve/CVE-2026-55438.htmlWed, 08 Jul 2026 19:38:38 +0000MEDIUM 5.8: Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.17, 2.32.7, 2.33.8, and 2.34.2, Coder's subdomain-based workspace app proxy allowed the same-owner CORS check to be bypassed. When a workspace-name subdomain segment parsed as a UUID, the wohttps://patchthecve.com/cve/CVE-2026-55437.htmlhttps://patchthecve.com/cve/CVE-2026-55437.htmlWed, 08 Jul 2026 19:38:48 +0000MEDIUM 5.4: Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.17, 2.32.7, 2.33.8, and 2.34.2, the `AgentLogLine` dashboard component instantiated `ansi-to-html` without `escapeXML: true` and inserted the result via `dangerouslySetInnerHTML` so HTML embhttps://patchthecve.com/cve/CVE-2026-55436.htmlhttps://patchthecve.com/cve/CVE-2026-55436.htmlWed, 08 Jul 2026 19:39:30 +0000HIGH 7.4: Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior to versions 2.32.7, 2.33.8, and 2.34.2, the AI Bridge Proxy (`aibridgeproxyd`) created a goproxy server whose default transport set `InsecureSkipVerify: true` and only assignedhttps://patchthecve.com/cve/CVE-2026-55433.htmlhttps://patchthecve.com/cve/CVE-2026-55433.htmlWed, 08 Jul 2026 19:39:45 +0000MEDIUM 5.4: Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the devcontainer recreate endpoint relied on route middleware that checked only `ActionRead` on the workspace and, unlike the sibling delete endpoint, performehttps://patchthecve.com/cve/CVE-2026-55432.htmlhttps://patchthecve.com/cve/CVE-2026-55432.htmlWed, 08 Jul 2026 19:40:36 +0000MEDIUM 5.4: Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the `CreateSubAgent` RPC did not validate a requested app sharing level against the template's `MaxPortSharingLevel` before persisting workspace apps, letting https://patchthecve.com/cve/CVE-2026-55431.htmlhttps://patchthecve.com/cve/CVE-2026-55431.htmlWed, 08 Jul 2026 19:42:45 +0000HIGH 7.7: Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `coder open app` opens external workspace-app URLs without validating the scheme or host. When an external app URL contains the `$SESSION_TOKEN` placeholder thhttps://patchthecve.com/cve/CVE-2026-55430.htmlhttps://patchthecve.com/cve/CVE-2026-55430.htmlWed, 08 Jul 2026 19:43:14 +0000MEDIUM 5.8: Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the workspace app proxy resolves the target app from `httpapi.RequestHost()` which prefers the `X-Forwarded-Host` header over the real `Host` header. No middlehttps://patchthecve.com/cve/CVE-2026-55429.htmlhttps://patchthecve.com/cve/CVE-2026-55429.htmlWed, 08 Jul 2026 19:43:31 +0000HIGH 8.7: Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `UpsertWorkspaceApp` overwrites an existing app's `agent_id` on a primary-key conflict and `insertAgentApp` accepts the app ID from the provisioner's `Completehttps://patchthecve.com/cve/CVE-2026-55428.htmlhttps://patchthecve.com/cve/CVE-2026-55428.htmlWed, 08 Jul 2026 19:44:06 +0000HIGH 8.2: Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the tailnet coordinator validates that an agent's `Addresses` derive from its authenticated UUID but applies no equivalent check to `AllowedIPs`. The coordinathttps://patchthecve.com/cve/CVE-2026-55427.htmlhttps://patchthecve.com/cve/CVE-2026-55427.htmlWed, 08 Jul 2026 19:44:24 +0000HIGH 8.3: Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `coder config-ssh` wrote server-supplied SSH settings (`HostnameSuffix`, `SSHConfigOptions`) into the user's `~/.ssh/config` without sanitizing embedded newlinhttps://patchthecve.com/cve/CVE-2026-55079.htmlhttps://patchthecve.com/cve/CVE-2026-55079.htmlWed, 08 Jul 2026 19:44:45 +0000MEDIUM 4.9: Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.24.0 and prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `NewDataBuilder` in `provisionersdk/proto/dataupload.go` allocated a byte slice using the client-supplied `FileSize` from a `Dathttps://patchthecve.com/cve/CVE-2026-55078.htmlhttps://patchthecve.com/cve/CVE-2026-55078.htmlWed, 08 Jul 2026 19:45:05 +0000MEDIUM 6.5: Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.17.0 and prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `POST /api/v2/files` converts zip uploads to tar in memory via `CreateTarFromZip`, which enforced a per-entry size limit but no https://patchthecve.com/cve/CVE-2026-55077.htmlhttps://patchthecve.com/cve/CVE-2026-55077.htmlThu, 09 Jul 2026 16:16:44 +0000HIGH 7.2: Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the `PUT /api/v2/users/{user}/password` endpoint authorized only `ActionUpdatePersonal` and did not prevent a `user-admin` from resetting an `owner` account's https://patchthecve.com/cve/CVE-2026-55076.htmlhttps://patchthecve.com/cve/CVE-2026-55076.htmlWed, 08 Jul 2026 19:46:04 +0000HIGH 7.4: Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, Coder's OIDC callback checked `email_verified` with a direct Go `bool` type assertion. When an IdP returned the claim as a non-boolean (for example the string https://patchthecve.com/cve/CVE-2026-55075.htmlhttps://patchthecve.com/cve/CVE-2026-55075.htmlWed, 08 Jul 2026 19:46:56 +0000HIGH 7.4: Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, two flaws in Coder's OIDC login chained into account takeover. Email-based user matching fell back to linking by email without checking for an existing link tohttps://patchthecve.com/cve/CVE-2026-46354.htmlhttps://patchthecve.com/cve/CVE-2026-46354.htmlWed, 08 Jul 2026 19:47:02 +0000CRITICAL 9.1: Coder allows organizations to provision remote development environments via Terraform. In versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, and 2.33.3, `azureidentity.Validate()` verifies that the PKCS#7 signer certificate chains to a trusted Azure CA but never verifies the PKCS#7 signaturhttps://patchthecve.com/cve/CVE-2026-45796.htmlhttps://patchthecve.com/cve/CVE-2026-45796.htmlWed, 08 Jul 2026 19:47:08 +0000MEDIUM 6.5: Coder allows organizations to provision remote development environments via Terraform. Versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, and 2.33.3 are vulnerable to unauthenticated semi-blind Server-Side Request Forgery (SSRF) via the Azure instance identity endpoint (`POST /api/v2/worksphttps://patchthecve.com/cve/CVE-2026-55434.htmlhttps://patchthecve.com/cve/CVE-2026-55434.htmlWed, 08 Jul 2026 19:47:17 +0000MEDIUM 6.5: Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.33.0 and prior to versions 2.33.8 and 2.34.2, AI Bridge provider handlers read request bodies with `io.ReadAll` without a maximum size so an authenticated user with AI Bridge access could senhttps://patchthecve.com/cve/CVE-2026-44454.htmlhttps://patchthecve.com/cve/CVE-2026-44454.htmlWed, 08 Jul 2026 19:47:37 +0000HIGH 8.1: Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7 and 2.30.2, the `dotfiles` registry module passed unsanitized user input to shell commands, allowing arbitrary code execution inside a provisioned workspace. Any user who supplied a craftehttps://patchthecve.com/cve/CVE-2026-55435.htmlhttps://patchthecve.com/cve/CVE-2026-55435.htmlThu, 09 Jul 2026 16:16:44 +0000MEDIUM 5.4: Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior to versions 2.32.7, 2.33.8, and 2.34.2, AI Bridge proxy endpoints authenticate via `Server.IsAuthorized` in `coderd/aibridgedserver`, which validates key format, expiry, secret