CVE-2026-55429Disclosure(coder / coder)

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `UpsertWorkspaceApp` overwrites an existing app's `agent_id` on a primary-key conflict and `insertAgentApp` accepts the app ID from the provisioner's `CompleteJob` payload without verifying it belongs to the workspace being built. `CompleteJob` runs under `dbauthz.AsProvisionerd` so the authorization layer does not block the cross-workspace upsert. Exploitation requires elevated access as a template author or external provisioner operator. The fix in versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2 verifies that any existing `workspace_apps` row matching the supplied ID belongs to the workspace being built and rejects cross-workspace agent reassignment. No known workarounds are available.

coder CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

Other references

Weakness type (CWE)

CWE-639

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

coder

Threat summary

3 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 2 classified signals
General: 1 classified signal
Peaked 1d ago at 2 mentions (2026-07-08); latest day: 1
3 total mentions across 2 days

Affected systems

Vendors

coder

Products

coder

Deep dive

Activity timeline3 mentions / 2d

Signal classification2 categories

Disclosure

266.7%

General

133.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-08	2	Disclosure1General1
2026-07-09	1	Disclosure1

Full discourse3 posts

Cyber Threat Observatory | Alan Turing Institute@TuringCyberObs90d
Disclosure
CVE-2026-55429 Coder Authorisation bypass could let elevated users rebind workspace apps to attacker-controlled agents and proxy IDE or terminal traffic Full analysis: https://github.com/alan-turing-institute/cyber-threat-observatory/blob/main/reports/2026-07-08/TIER_2_CVE-2026-55429.md #CyberSecurity #IdentitySecurity #VulnerabilityManagement
Post summary
The tweet announces CVE‑2026‑55429, an authorization bypass in Coder that lets privileged users proxy IDE or terminal traffic via attacker‑controlled agents, and links to a detailed analysis report.
0000046
57 followersView on X
Infoflowcloud@infoflowcloud91d
Disclosure
🚨*CVE* CVE-2026-55429 Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `UpsertWorkspaceApp` over… https://www.cve.org/CVERecord?id=CVE-2026-55429 ----- Traducción: CVE-2026-55429 Cod… http://infoflow.cloud`
Post summary
The text announces CVE-2026-55429, a vulnerability in older Coder versions related to the UpsertWorkspaceApp API, noting that newer releases mitigate the issue.
0000041
91 followersView on X
CVE@CVEnew91d
General
CVE-2026-55429 Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `UpsertWorkspaceApp` over… https://www.cve.org/CVERecord?id=CVE-2026-55429
Post summary
The entry notes CVE‑2026‑55429, identifies affected Coder versions and the affected function, but provides no evidence of exploitation, PoC, or patches.
00000653
57.8K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	coder	coder	-	go	-

Explore more

Back to dashboard coder CVEs coder vulnerabilities