CVE-2026-121967 · Runtime
NO FIX YET · SEE WHAT TO DO
Coder's AI Gateway passthrough router forwards percent-encoded dot segments such as %2e%2e upstream without rejecting them. An authenticated user can use this to reach provider endpoints outside the allowlist, using the deployment's shared provider key.
first public Oct 21, 2026 · 1 source
Is this in your stack? Find out in 2 minutes.
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
Deployments of Coder that run the AI Gateway passthrough router and allow authenticated users to make requests through it are exposed. The sources describe the risk as reaching provider endpoints under allowlisted prefixes with the centrally managed provider key, so the flaw matters most where that key is shared. Deployments on fixed versions or without the AI Gateway feature can skip it.
Not affected if ai-gateway-disabled, fixed-version
Who cares ai-gateway, coder, self-hosted
coder version and compare it against the affected ranges in the sources.2.29.22 for the 2.28 line, 2.34.13 for 2.30-2.34, 2.35.10 for 2.35, 2.36.8 for 2.36, 2.37.5 for 2.37, or for 2.38.Coder 2.28.0 before 2.29.22, 2.30.0 before 2.34.13, 2.35.0 before 2.35.10, 2.36.0 before 2.36.8, 2.37.0 before 2.37.5, and 2.38.0 before 2.38.1 contains a path traversal vulnerability in the AI Gateway passthrough router, which forwards percent-encoded dot segments upstream without rejecting them. Authenticated users can send paths such as %2e%2e or ..%2F under allowlisted prefixes to reach unintended provider endpoints using the deployment's centrally managed provider key.
2.38.1This page as .md · .json · in your agent: get_signal("CVE-2026-121967") · CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.