CVE-2026-111931 | Coder up to 2.34.7 handleAPIKeySmuggling r.URL.Path redirect

October 17, 2026 Yanac

A vulnerability was found in Coder up to 2.34.7. It has been rated as problematic. This issue affects the function handleAPIKeySmuggling. This manipulation of the argument r.URL.Path causes open redirect.

This vulnerability is registered as CVE-2026-111931. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More