Skip to content
Threat Feed
Subscribe

Product

Coder (Vulnerable: >= 2.33.0, < 2.33.8)

1 brief RSS
high advisory

Coder's Workspace App Vulnerability Allows Cross-Workspace Agent Rebinding

A critical authorization bypass vulnerability (CVE-2026-55429) exists in Coder's workspace application, allowing an attacker with template authorship or external provisioner access to rebind a victim's workspace app to their own agent, enabling them to proxy and compromise the victim's IDE and terminal sessions.

Coder +3 vulnerability privilege-escalation application
4t