CVE-2026-121967

The Coder platform (versions 2.28.0 before 2.29.22, 2.30.0 before 2.34.13, 2.35.0 before 2.35.10, 2.36.0 before 2.36.8, 2.37.0 before 2.37.5, and 2.38.0 before 2.38.1) contains a path traversal vulnerability in the AI Gateway passthrough router . The root cause is that the router forwards percent...