tocsin

CVE-2026-55436

3 advisories.

Go/github.com/coder/coder/v2 CVE-2026-55436: high 7.4, EPSS 0.26%

Coder's AI Bridge Proxy skips TLS certificate verification in default configuration

Action: Upgrade github.com/coder/coder/v2 to 2.32.7 or later.

go get github.com/coder/coder/v2@v2.34.2
go get github.com/coder/coder/v2@v2.33.8
go get github.com/coder/coder/v2@v2.32.7

Affected

introducedfixedlast affected
2.34.02.34.2-
2.33.02.33.8-
2.30.02.32.7-

Fixed versions

2.34.22.33.82.32.7

Sources

CVE-2026-55436 · published · modified · JSON

Go/github.com/coder/coder CVE-2026-55436: unknown, EPSS 0.26%

Coder's AI Bridge Proxy skips TLS certificate verification in default configuration in github.com/coder/coder

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2026-55436 · published · modified · JSON

Go/github.com/coder/coder/v2 CVE-2026-55436: unknown, EPSS 0.26%

Coder's AI Bridge Proxy skips TLS certificate verification in default configuration in github.com/coder/coder

Action: Upgrade github.com/coder/coder/v2 to 2.32.7 or later.

go get github.com/coder/coder/v2@v2.32.7
go get github.com/coder/coder/v2@v2.33.8
go get github.com/coder/coder/v2@v2.34.2

Affected

introducedfixedlast affected
2.30.02.32.7-
2.33.02.33.8-
2.34.02.34.2-

Fixed versions

2.32.72.33.82.34.2

Sources

CVE-2026-55436 · published · modified · JSON