Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft

Coder vulnerable to workspace auto-creation via crafted URL parameters without user consent

Coder's workspace app upsert allows cross-workspace agent rebinding via user-controlled app ID

Coder: Workspace agent API insecure redirect handling allowed cross-agent file read and write

Coder vulnerable to SSH config injection via unsanitized server-supplied values in `coder config-ssh`

Coder: Route hijacking through lack of validation of agent-supplied AllowedIPs in tailnet coordinator

Coder allows oragnizations to provision remote development environments via Terraform

Coder's privilege escalation vulnerability could lead to a cross workspace compromise

Coder before 2.35.4 Credential Theft via Workspace Proxy Hostname Prefix Match

Coder's AI Bridge Proxy skips TLS certificate verification in default configuration

Coder's OIDC email_verified type coercion bypass enables account takeover via unverified email linking

Coder vulnerable to OIDC account takeover via email-based user matching and email_verified bypass

Coder: User-admin role can reset owner account password

Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing

Coder's subdomain workspace app routing trusts unauthenticated X-Forwarded-Host header, enabling cross-app data access

Coder before 2.29.21, 2.34.12, 2.35.9, 2.36.7, and 2.37.4 Missing Audience Validation in GCP Instance-Identity Authentication

Coder's unbounded memory allocation in provisioner file upload allows authenticated denial of service

Coder: Zip upload decompression lacks aggregate size limit, enabling denial of service

Coder vulnerable to unauthenticated SSRF via Azure Instance Identity Endpoint

Coder vulnerable to denial of service via unbounded request body in AI Bridge provider endpoints

Coder's session token leaked to arbitrary hosts via `coder open app` for external workspace apps

Coder logged sensitive objects unsanitized

Coder 2.0.0 before 2.34.8 Authorization Bypass via User-Level ACL in RBAC Policy

Coder vulnerable to stored HTML injection via workspace agent logs in AgentLogLine component

Coder: Devcontainer recreate endpoint missing write authorization allows read-only roles to destroy containers

Coder's sub-agent app registration bypasses template port-sharing policy enforcement

Suspended Coder users retain access to AI Bridge LLM proxy endpoints

Coder 2.30.0 before 2.34.8 Cross-Organization File Disclosure via DownloadFile RPC

Coder 2.0.0 before 2.34.8 Open Redirect via Workspace App Proxy

Coder from 2.26.0 before 2.34.8 Information Disclosure via Workspace ACL Endpoint

Coder 2.3.1 before 2.16.1 Open Redirect via Login Page redirect Parameter

Coder before 2.23.0 Session Expiration Bypass via OIDC Without Refresh Token

Coder before 2.34.7 IP Spoofing via X-Forwarded-For Header

Coder before 2.34.2 User Enumeration via Login Placeholder Hash

Coder before 2.34.2 Stored HTML Injection via Appearance Settings

Coder from 2.10.0 before 2.34.8 Information Disclosure via Agent /debug/manifest