CVE-2026-55435
3 advisories.
Go/github.com/coder/coder/v2 CVE-2026-55435: medium 5.4, EPSS 0.32%
Suspended Coder users retain access to AI Bridge LLM proxy endpoints
Action: Upgrade github.com/coder/coder/v2 to 2.32.7 or later.
go get github.com/coder/coder/v2@v2.34.2go get github.com/coder/coder/v2@v2.33.8go get github.com/coder/coder/v2@v2.32.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.34.0 | 2.34.2 | - |
| 2.33.0 | 2.33.8 | - |
| 2.30.0 | 2.32.7 | - |
Fixed versions
| 2.34.2 | 2.33.8 | 2.32.7 |
Sources
- osv: GHSA-wqxv-w64v-5wh6
- https://github.com/coder/coder/security/advisories/GHSA-wqxv-w64v-5wh6
- https://nvd.nist.gov/vuln/detail/CVE-2026-55435
- https://github.com/coder/coder/pull/26164
- https://github.com/coder/coder/pull/26173
- https://github.com/coder/coder/commit/0d2c9f904a8b75b888140fcc8fbf4633660cc787
- https://github.com/coder/coder
- https://github.com/coder/coder/releases/tag/v2.32.7
- https://github.com/coder/coder/releases/tag/v2.33.8
- https://github.com/coder/coder/releases/tag/v2.34.2
CVE-2026-55435 · published · modified · JSON
Go/github.com/coder/coder CVE-2026-55435: unknown, EPSS 0.32%
Suspended Coder users retain access to AI Bridge LLM proxy endpoints in github.com/coder/coder
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-5925
- https://github.com/coder/coder/security/advisories/GHSA-wqxv-w64v-5wh6
- https://github.com/coder/coder/pull/26164
CVE-2026-55435 · published · modified · JSON
Go/github.com/coder/coder/v2 CVE-2026-55435: unknown, EPSS 0.32%
Suspended Coder users retain access to AI Bridge LLM proxy endpoints in github.com/coder/coder
Action: Upgrade github.com/coder/coder/v2 to 2.32.7 or later.
go get github.com/coder/coder/v2@v2.32.7go get github.com/coder/coder/v2@v2.33.8go get github.com/coder/coder/v2@v2.34.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.30.0 | 2.32.7 | - |
| 2.33.0 | 2.33.8 | - |
| 2.34.0 | 2.34.2 | - |
Fixed versions
| 2.32.7 | 2.33.8 | 2.34.2 |
Sources
- osv: GO-2026-5925#Go/github.com/coder/coder/v2
- https://github.com/coder/coder/security/advisories/GHSA-wqxv-w64v-5wh6
- https://github.com/coder/coder/pull/26164
CVE-2026-55435 · published · modified · JSON