CVE-2026-126403
Received Received - Intake

Improper Authorization in Coder Workspace Agent Token Exposure

Publication date: 2026-11-13

Last updated on: 2026-11-13

Assigner: VulnCheck

Description
Coder 2.26.0 before 2.29.24, 2.30.0 before 2.34.16, 2.35.0 before 2.36.11, 2.37.0 before 2.37.8, and 2.38.0 before 2.38.4 contains an improper authorization flaw in the external agent credentials endpoint, which returns the workspace agent token to users with only workspace read access rather than ssh permission. Authenticated users with roles such as Template Admin or Organization Admin can use the token to read the owner's private Git SSH key and Git provider OAuth tokens, and impersonate the agent to receive the owner's sessions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-13
Last Modified
2026-11-13
Generated
2026-11-13
AI Q&A
2026-11-13
EPSS Evaluated
N/A
NVD
CVE-2026-126403
EUVD
EUVD-2026-125162

Affected Vendors & Products

Showing 6 associated CPEs
Vendor Product Version / Range
coder coder to 2.29.24 (exc)
coder coder to 2.34.16 (exc)
coder coder to 2.36.11 (exc)
coder coder to 2.37.8 (exc)
coder coder to 2.38.4 (exc)
coder coder 2.38.4

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-126403 is an authorization bypass flaw in Coder versions 2.26.0 to 2.38.3. The external agent credentials endpoint incorrectly provides the workspace agent token to users with only workspace read access instead of requiring SSH permissions. This allows authenticated users with roles like Template Admin or Organization Admin to access the token and read sensitive data such as the owner's private Git SSH key and Git provider OAuth tokens.

Detection Guidance

Check Coder version with `coder version` or `docker exec <container> coder version`. If running versions 2.26.0 to 2.38.3, the system is vulnerable. Inspect API logs for requests to `/api/v2/workspaces/{workspace}/external-agent/{agent}/credentials` with non-SSH access roles.

Impact Analysis

Attackers with read access can retrieve the workspace agent token and impersonate the agent to intercept the owner's sessions. This enables unauthorized access to sensitive data including private Git SSH keys, OAuth tokens, environment variables, startup scripts, and active sessions. The impact includes data breaches, session hijacking, and potential full account compromise.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive personal or health data, violating GDPR and HIPAA compliance requirements for data protection and access controls. Organizations using affected Coder versions may face regulatory penalties, data breach notifications, and reputational damage due to non-compliance with security standards.

Mitigation Strategies

Upgrade Coder to patched versions (2.29.24, 2.34.16, 2.36.11, 2.37.8, or 2.38.4+). If immediate upgrade isn't possible, restrict privileged roles (Template Admin, Organization Admin) or disable external agent templates until patching.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-126403. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...