CVE-2026-126403 · Runtime
NO FIX YET · SEE WHAT TO DO
Coder's external agent credentials endpoint returns the workspace agent token to users who only have workspace read access, not SSH permission. An authenticated user can use that token to read the workspace owner's private Git SSH key and Git provider OAuth tokens, and to impersonate the agent.
first public Oct 29, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Teams running self-hosted Coder servers in the affected version ranges are exposed. Any authenticated user with workspace read access to another user's workspace, including Template Admin or Organization Admin roles, can abuse the endpoint. Deployments on the fixed versions or on managed hosting not in these ranges can skip it.
Not affected if default-config
Who cares coder, git, self-hosted, ssh
coder version and compare it to the fixed ranges below.2.29.24 for the 2.26.x line2.34.16 for the 2.30.x line2.36.11 for the 2.35.x line2.37.8 for the 2.37.x line2.38.4 for the 2.38.x lineCoder 2.26.0 before 2.29.24, 2.30.0 before 2.34.16, 2.35.0 before 2.36.11, 2.37.0 before 2.37.8, and 2.38.0 before 2.38.4 contains an improper authorization flaw in the external agent credentials endpoint, which returns the workspace agent token to users with only workspace read access rather than ssh permission. Authenticated users with roles such as Template Admin or Organization Admin can use the token to read the owner's private Git SSH key and Git provider OAuth tokens, and impersonate the agent to receive the owner's sessions.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.