CVE-2026-55435

creationtimestamp| type| source ---|---|--- 2026-07-07 20:51:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq3iaejgdd2x...

CVE-2026-55435

CVE-2026-55435 affects Coder’s AI Bridge proxy endpoints. The vulnerability stems from Server.IsAuthorized not checking whether a suspended account is active, so an unexpired API key issued to a suspended user remains usable until the key is deleted. Impact is limited to already-issued keys; no n...