CVE-2026-126308 · Infrastructure
NO FIX YET · SEE WHAT TO DO
The Coder web dashboard substitutes a full-access API key into external app URLs without checking whether the app is a sub-agent. Code running in a workspace can register a disguised app, so when the owner clicks it their API key is sent to an attacker-chosen destination.
first public Oct 27, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Any team running a self-hosted Coder server whose version falls in an affected range, especially where users run code they do not fully trust inside workspaces. The exposure is through the web dashboard's handling of external app URLs, so deployments that do not use that dashboard with sub-agent apps are less exposed. unknown whether managed Coder hosting is affected.
Not affected if version-outside-affected-ranges
Who cares coder, self-hosted, workspaces
coder version and compare it to the fixed ranges below.2.29.23 for the 2.24.x line2.34.14 for the 2.30.x line2.36.9 for the 2.35.x line2.37.6 for the 2.37.x line2.38.2 for the 2.38.x lineThe web dashboard in Coder 2.24.0 before 2.29.23, 2.30.0 before 2.34.14, 2.35.0 before 2.36.9, 2.37.0 before 2.37.6, and 2.38.0 before 2.38.2 replaces the $SESSION_TOKEN placeholder in external app URLs with a full-access API key without checking whether the app belongs to a sub-agent. Code running in a workspace can register a disguised sub-agent app with a custom protocol URL, so the owner's click sends their API key to an attacker-chosen destination.
This page as .md · .json · CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.