CVE-2026-111927 | Coder up to 2.29.19/2.33.11/2.34.7/2.35.3 Hostname Validation auth-redirect GetWorkspaceProxyByHostname input validation

October 17, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Coder up to 2.29.19/2.33.11/2.34.7/2.35.3. Impacted is the function GetWorkspaceProxyByHostname of the file /api/v2/applications/auth-redirect of the component Hostname Validation. Such manipulation leads to improper input validation.

This vulnerability is documented as CVE-2026-111927. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More