TI-2026-40003 Aliases CVE-2026-55435 GHSA-wqxv-w64v-5wh6

Suspended Coder users retain access to AI Bridge LLM proxy endpoints

LOW 24CWE-863Published 2026-07-07 · Updated 2026-07-09

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: Low · Low · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-863.

Summary

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior to versions 2.32.7, 2.33.8, and 2.34.2, AI Bridge proxy endpoints authenticate via `Server.IsAuthorized` in `coderd/aibridgedserver`, which validates key format, expiry, secret and deleted or system users but does not check whether the account is suspended. Because suspension does not revoke existing API keys, a suspended user's unexpired token keeps working. Practical impact is limited to already-issued API keys of suspended users until those keys are deleted. Versions 2.32.7, 2.33.8, and 2.34.2 patch the issue. As a workaround, on suspension, delete the user's API keys via `DELETE /api/v2/users/{user}/keys`.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00315 24th percentileScored 2026-11-07

Fix Fixed coder (coder): 2.34.2, 2.33.8, 2.32.7github.com/coder/coder/v2 (Go): 2.34.2, 2.33.8, 2.32.7

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
coder	coder	2.34.0 to before 2.34.2; 2.33.0 to before 2.33.8; 2.30.0 to before 2.32.7	2.34.2, 2.33.8, 2.32.7	Patch available	CNA
—	github.com/coder/coder/v2 (Go)	2.34.0 to before 2.34.2	2.34.2	Patch available	GHSA-wqxv-w64v-5wh6
—	github.com/coder/coder/v2 (Go)	2.33.0 to before 2.33.8	2.33.8	Patch available	GHSA-wqxv-w64v-5wh6
—	github.com/coder/coder/v2 (Go)	2.30.0 to before 2.32.7	2.32.7	Patch available	GHSA-wqxv-w64v-5wh6

coder Vendorcoder Affected 2.34.0 to before 2.34.2; 2.33.0 to before 2.33.8; 2.30.0 to before 2.32.7 Fixed in 2.34.2, 2.33.8, 2.32.7 Patch available CNA
github.com/coder/coder/v2 (Go) Vendor— Affected 2.34.0 to before 2.34.2 Fixed in 2.34.2 Patch available GHSA-wqxv-w64v-5wh6
github.com/coder/coder/v2 (Go) Vendor— Affected 2.33.0 to before 2.33.8 Fixed in 2.33.8 Patch available GHSA-wqxv-w64v-5wh6
github.com/coder/coder/v2 (Go) Vendor— Affected 2.30.0 to before 2.32.7 Fixed in 2.32.7 Patch available GHSA-wqxv-w64v-5wh6

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:coder:coder::::::go::*	2.30.0 to before 2.32.7; 2.33.0 to before 2.33.8; 2.34.0 to before 2.34.2	Vulnerable	coder

cpe:2.3:a:coder:coder:*:*:*:*:*:go:*:* Versions 2.30.0 to before 2.32.7; 2.33.0 to before 2.33.8; 2.34.0 to before 2.34.2 Vulnerable ·coder

Remediation

Fix · CNA coder (coder) Fixed in 2.34.2, 2.33.8, 2.32.7
Fix · GHSA-wqxv-w64v-5wh6 github.com/coder/coder/v2 (Go) Fixed in 2.34.2 Advisory →
Fix · GHSA-wqxv-w64v-5wh6 github.com/coder/coder/v2 (Go) Fixed in 2.33.8 Advisory →
Fix · GHSA-wqxv-w64v-5wh6 github.com/coder/coder/v2 (Go) Fixed in 2.32.7 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2026-55435
2026-10-03 Alias added: GHSA-wqxv-w64v-5wh6

References

Patch 4

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2026-55435

Other 4

TI-2026-34071 Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft CVSS 3.1CRITICAL 9.1
TI-2026-32394 Coder vulnerable to workspace auto-creation via crafted URL parameters without user consent CVSS 3.1HIGH 8.8
TI-2024-18523 Coder's OIDC authentication allows email with partially matching domain to register CVSS 3.1HIGH 8.2
TI-2026-39997 Coder's workspace app upsert allows cross-workspace agent rebinding via user-controlled app ID CVSS 3.1HIGH 8.7
TI-2026-39996 Coder: Route hijacking through lack of validation of agent-supplied AllowedIPs in tailnet coordinator CVSS 3.1HIGH 8.2
TI-2026-39995 Coder vulnerable to SSH config injection via unsanitized server-supplied values in `coder config-ssh` CVSS 3.1HIGH 8.3

See all 22 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences