{"data":{"id":"a67ebd62-b089-43b5-bfef-70b5c87a67b3","title":"GHSA-wqxv-w64v-5wh6: Suspended Coder users retain access to AI Bridge LLM proxy endpoints","summary":"Coder's AI Bridge authorization logic, implemented in `Server.IsAuthorized` in `coderd/aibridgedserver`, does not check whether a user account is suspended, so a suspended user's unexpired API key keeps working against AI Bridge LLM proxy endpoints. The flaw affects AI Bridge from v2.30.0 onward, and the v2.29 ESR line is not affected. An attacker holding such a token can consume paid provider resources billed to the deployment and, if injected MCP tools are enabled, invoke those tools until the token expires.","solution":"Fixed in v2.34.2 (2.34 line), v2.33.8 (2.33 line) and v2.32.7 (2.32 line). Workaround: on suspension, delete the user's API keys via `DELETE /api/v2/users/{user}/keys`.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-wqxv-w64v-5wh6","publishedAt":"2026-07-06T21:11:20.000Z","cveId":"CVE-2026-55435","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["github.com/coder/coder/v2@>= 2.30.0, < 2.32.7 (fixed: 2.32.7)","github.com/coder/coder/v2@>= 2.33.0, < 2.33.8 (fixed: 2.33.8)","github.com/coder/coder/v2@>= 2.34.0, < 2.34.2 (fixed: 2.34.2)"],"affectedPackageNames":["github.com/coder/coder/v2"],"affectedPackageRefs":["go:github.com/coder/coder/v2"],"affectedVendors":["Anthropic"],"affectedVendorsRaw":["Coder AI Bridge","LLM proxy endpoints","MCP tools"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00315,"epssCheckedAt":"2026-10-14T12:12:43.303Z","kevDateAdded":null,"advisoryAliases":["GHSA-wqxv-w64v-5wh6"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-07-06T21:11:20.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","availability"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}