CVE-2026-121967

A flaw was found in Coder. This vulnerability allows an authenticated attacker to gain unauthorized access to upstream provider endpoints using the deployment's centrally managed credentials. The issue occurs because the AI Gateway passthrough router forwards percent-encoded dot segments without...