Skip to content
OpenAdvisories

Vendor

coder

40 known vulnerabilities.

Products

coder 37 agentapi 1 code-marketplace 1 code-server 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-46354

    Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft

    Coder allows organizations to provision remote development environments via Terraform. In versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, and 2.33.3, `azureidentity.Validate()` verifies that the PKCS#7 signer certificate chains to a trusted Azure …

    coder coder github.com/coder/coder github.com/coder/coder/v2 Go