Go/github.com/coder/coder/v2 CVE-2026-63443: high 8.3, EPSS 0.76%

Coder's workspace agent API insecure redirect handling allowed cross-agent file read and write

Action: Upgrade github.com/coder/coder/v2 to 2.29.19 or later.

go get github.com/coder/coder/v2@v2.34.4

go get github.com/coder/coder/v2@v2.33.10

go get github.com/coder/coder/v2@v2.32.9

go get github.com/coder/coder/v2@v2.29.19

Affected

2.34.4

2.33.10

2.32.9

2.29.19

CVE-2026-63443 · published 2026-07-06T21:52:31Z · modified 2026-09-16T03:55:37.481979469Z · JSON