Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2026/07/07 11:55 p.m.39 views

CVE-2026-55427 Coder vulnerable to SSH config injection via unsanitized server-supplied values in `coder config-ssh`

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, coder config-ssh wrote server-supplied SSH settings HostnameSuffix, SSHConfigOptions into the user's /.ssh/config without sanitizing embedded newlines or...

8.3CVSS0.00266EPSS
SaveExploits0References6
Rows per page
Query Builder