Skip to content
Threat Feed
Subscribe

Tag

Cli-Exploitation

1 brief RSS
high advisory

Coder `coder open app` Session Token Leakage Vulnerability (CVE-2026-55431)

A high-severity vulnerability, CVE-2026-55431, in the Coder CLI's `coder open app` command allows malicious workspace template authors to exfiltrate user session tokens via crafted external app URLs, leading to full account impersonation.

coder/coder/v2 +3 credential-access vulnerability cli-exploitation token-leakage coder
1t 1i