CVE-2026-55432— Coder子代理应用注册绕过模板端口共享策略执行漏洞
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing Application新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-55432の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Coder's sub-agent app registration bypasses template port-sharing policy enforcement
ソース: NVD (National Vulnerability Database)
脆弱性説明
Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the `CreateSubAgent` RPC did not validate a requested app sharing level against the template's `MaxPortSharingLevel` before persisting workspace apps, letting a workspace owner exceed the administrator's configured maximum. Exploitation requires the ability to register sub-agent apps in a workspace the attacker controls. The fix in versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2clamps the sub-agent app sharing level to the template's `MaxPortSharingLevel`. As a workaround, disable wildcard app hostnames (`CODER_WILDCARD_ACCESS_URL`) to block subdomain-based app routing.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
授权机制缺失
ソース: NVD (National Vulnerability Database)
影響を受ける製品
II. CVE-2026-55432の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-55432のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-55432 补丁与修复 (1)
CVE-2026-55432 厂商安全公告 (1)
CVE-2026-55432 厂商页面 (4)
Same Patch Batch · coder · 2026-07-08 · 8 CVEs total
| CVE-2026-55429 | 8.7 HIGH | Coder's workspace app upsert allows cross-workspace agent rebinding via user-controlled ap |
| CVE-2026-55431 | 7.7 HIGH | Coder's session token leaked to arbitrary hosts via `coder open app` for external workspac |
| CVE-2026-55436 | 7.4 HIGH | Coder's AI Bridge Proxy skips TLS certificate verification in default configuration |
| CVE-2026-55438 | 5.8 MEDIUM | Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing |
| CVE-2026-55430 | 5.8 MEDIUM | Coder's subdomain workspace app routing trusts unauthenticated X-Forwarded-Host header, en |
| CVE-2026-55437 | 5.4 MEDIUM | Coder vulnerable to stored HTML injection via workspace agent logs in AgentLogLine compone |
| CVE-2026-55433 | 5.4 MEDIUM | Coder: Devcontainer recreate endpoint missing write authorization allows read-only roles t |
IV. 関連脆弱性
同じ製品: coder
- CVE-2026-55438
Coder's workspace app CORS origin check can be bypassed via - CVE-2026-55437
Coder vulnerable to stored HTML injection via workspace agen - CVE-2026-55436
Coder's AI Bridge Proxy skips TLS certificate verification i - CVE-2026-55433
Coder: Devcontainer recreate endpoint missing write authoriz - CVE-2026-55431
Coder's session token leaked to arbitrary hosts via `coder o
同じベンダー: coder
- CVE-2026-55438
Coder's workspace app CORS origin check can be bypassed via - CVE-2026-55437
Coder vulnerable to stored HTML injection via workspace agen - CVE-2026-55436
Coder's AI Bridge Proxy skips TLS certificate verification i - CVE-2026-55433
Coder: Devcontainer recreate endpoint missing write authoriz - CVE-2026-55431
Coder's session token leaked to arbitrary hosts via `coder o
同じ弱点: CWE-862
- CVE-2026-61442
PraisonAI Platform before 0.1.9 Authorization Bypass via PAT - CVE-2026-9017
NEX-Forms <= 9.2.2 - Missing Authorization to Unauthenticate - CVE-2026-12103
Wallet for WooCommerce <= 1.6.4 - Missing Authorization to A - CVE-2026-12994
WCFM – Frontend Manager for WooCommerce <= 6.7.27 - Missing - CVE-2026-12738
WP Easy Pay <= 4.5.0 - Missing Authorization to Authenticate
V. CVE-2026-55432へのコメント
まだコメントはありません