Coder allows organizations to provision remote development environments via Terraform. Prior to 2.29.19, 2.32.9, 2.33.10, and 2.34.4, agentConn.apiClient() follows redirects while its custom transport accepts the host from the redirected request URL when the port is the workspace agent HTTP API port 4. An authenticated user who controls a modified workspace agent and knows another online agent's UUID can derive the victim's tailnet address and redirect control-plane requests to that agent. HTTP 301, 302, and 303 redirects can redirect read requests, while HTTP 307 and 308 preserve replayable write and process-start requests. The redirected workspace agent file APIs can read or write files as the victim workspace user, and affected versions exposing the workspace agent process API can execute commands after a redirected file write, crossing workspace and tenant boundaries. This issue is fixed in versions 2.29.19, 2.32.9, 2.33.10, and 2.34.4.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable no

Technical Impact total

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
coder coder affected
Version Status Constraints
>= 2.27.0, < 2.29.19 affected —
>= 2.30.0, < 2.32.9 affected —
>= 2.33.0, < 2.33.10 affected —
>= 2.34.0, < 2.34.4 affected —

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Coder Subscribe
Coder Subscribe

Project Subscriptions

Vendors Products
Coder Subscribe
Coder Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://github.com/coder/coder/commit/2312b67bc52c4e314c18c4b4be5dcf5500c94ad7 cve-icon cve-icon
https://github.com/coder/coder/commit/812549d671d0f5a0b45adcee860d37b70aaddccd cve-icon cve-icon
https://github.com/coder/coder/commit/ec3ba84c0002f47dd979c073cde1ab345acbaea5 cve-icon cve-icon
https://github.com/coder/coder/commit/eeb2624549ddb85538e493af3e678fdb185a809f cve-icon cve-icon
https://github.com/coder/coder/commit/f8bdec5add4711650d5bfb6ff93d0cc9d7821c81 cve-icon cve-icon
https://github.com/coder/coder/pull/26600 cve-icon cve-icon
https://github.com/coder/coder/pull/26611 cve-icon cve-icon
https://github.com/coder/coder/pull/26612 cve-icon cve-icon
https://github.com/coder/coder/pull/26613 cve-icon cve-icon
https://github.com/coder/coder/pull/26622 cve-icon cve-icon
https://github.com/coder/coder/releases/tag/v2.29.19 cve-icon cve-icon
https://github.com/coder/coder/releases/tag/v2.32.9 cve-icon cve-icon
https://github.com/coder/coder/releases/tag/v2.33.10 cve-icon cve-icon
https://github.com/coder/coder/releases/tag/v2.34.4 cve-icon cve-icon
https://github.com/coder/coder/security/advisories/GHSA-qrwj-vh9x-gw5v cve-icon cve-icon
History

Tue, 15 Sep 2026 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Coder
Coder coder
Vendors & Products Coder
Coder coder

Tue, 15 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 15 Sep 2026 17:00:00 +0000

Type Values Removed Values Added
Description Coder allows organizations to provision remote development environments via Terraform. Prior to 2.29.19, 2.32.9, 2.33.10, and 2.34.4, agentConn.apiClient() follows redirects while its custom transport accepts the host from the redirected request URL when the port is the workspace agent HTTP API port 4. An authenticated user who controls a modified workspace agent and knows another online agent's UUID can derive the victim's tailnet address and redirect control-plane requests to that agent. HTTP 301, 302, and 303 redirects can redirect read requests, while HTTP 307 and 308 preserve replayable write and process-start requests. The redirected workspace agent file APIs can read or write files as the victim workspace user, and affected versions exposing the workspace agent process API can execute commands after a redirected file write, crossing workspace and tenant boundaries. This issue is fixed in versions 2.29.19, 2.32.9, 2.33.10, and 2.34.4.
Title Coder: Workspace agent API insecure redirect handling allowed cross-agent file read and write
Weaknesses CWE-863
CWE-918
References
Metrics cvssV3_1

{'score': 8.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2026-09-15T17:31:58.740Z

Reserved: 2026-07-16T19:35:57.767Z

Link: CVE-2026-63443

cve-icon Vulnrichment

Updated: 2026-09-15T17:31:55.942Z

cve-icon NVD

Status : Received

Published: 2026-09-15T17:17:23.567

Modified: 2026-09-15T18:17:29.010

Link: CVE-2026-63443

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-15T19:00:13Z

Weaknesses