CVE-2026-45796 | Coder up to 2.33.2 Azure Instance Identity Endpoint azure-instance-identity server-side request forgery

July 8, 2026 Yanac

A vulnerability marked as problematic has been reported in Coder up to 2.33.2. This vulnerability affects unknown code of the file /api/v2/workspaceagents/azure-instance-identity of the component Azure Instance Identity Endpoint. The manipulation leads to server-side request forgery.

This vulnerability is traded as CVE-2026-45796. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More