Medium severity · published Jul 7, 2026
CVE-2026-55434
Coder vulnerable to denial of service via unbounded request body in AI Bridge provider endpoints
6.5
CVSS
0.6%
EPSS
No
On KEV
Description
Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.33.0 and prior to versions 2.33.8 and 2.34.2, AI Bridge provider handlers read request bodies with `io.ReadAll` without a maximum size so an authenticated user with AI Bridge access could send an arbitrarily large body and exhaust memory. Exploitation requires authenticated access to the AI Bridge endpoints and the impact is limited to availability (denial of service). Versions 2.33.8 and 2.34.2 patch the issue. No known workarounds are available.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 46% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
coder · coder
>= 2.34.0, < 2.34.2; >= 2.33.0, < 2.33.8 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-55434
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-55434
Issue Tracking
https://github.com/coder/coder/pull/26164
Release Notes
https://github.com/coder/coder/releases/tag/v2.33.8
Release Notes
https://github.com/coder/coder/releases/tag/v2.34.2
Patch
https://github.com/coder/coder/security/advisories/GHSA-f5vp-w269-392g
More from coder
9.1
CVE-2026-46354
Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft
8.8
CVE-2026-44454
Coder vulnerable to workspace auto-creation via crafted URL parameters without user consent
8.7
CVE-2026-55429
Coder's workspace app upsert allows cross-workspace agent rebinding via user-controlled app ID
8.3
CVE-2026-63443
Coder: Workspace agent API insecure redirect handling allowed cross-agent file read and write
8.3
CVE-2026-55427
Coder vulnerable to SSH config injection via unsanitized server-supplied values in `coder config-ssh`