CVE-2026-111929 | Coder up to 2.34.7 gRPC DownloadFile uuid authorization

October 17, 2026 Yanac

A vulnerability described as problematic has been identified in Coder up to 2.34.7. The affected element is the function DownloadFile of the component gRPC Handler. Executing a manipulation of the argument uuid can lead to authorization bypass.

This vulnerability is handled as CVE-2026-111929. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More