CVE-2026-55430 | Coder up to 2.29.16/2.32.6/2.33.7/2.34.1 Workspace App Proxy RequestHost client-side enforcement of server-side security

SecurityVulns
Yanac

A vulnerability marked as critical has been reported in Coder up to 2.29.16/2.32.6/2.33.7/2.34.1. Affected by this issue is the function RequestHost of the component Workspace App Proxy. The manipulation leads to client-side enforcement of server-side security.

This vulnerability is documented as CVE-2026-55430. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More