1 matches found
CVE-2026-55434 Coder vulnerable to denial of service via unbounded request body in AI Bridge provider endpoints
Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.33.0 and prior to versions 2.33.8 and 2.34.2, AI Bridge provider handlers read request bodies with io.ReadAll without a maximum size so an authenticated user with AI Bridge access could se...
6.5CVSS6AI score0.00552EPSS
SaveExploits0References4
20