MediumVulnerabilityLLM-specific
GHSA-f5vp-w269-392g: Coder vulnerable to denial of service via unbounded request body in AI Bridge provider endpoints
- Identifiers
- CVE-2026-55434GHSA-f5vp-w269-392g
- Published
- Record updated
- Affected
- github.com/coder/coder/v2 >= 2.33.0, < 2.33.8, fixed in 2.33.8
- github.com/coder/coder/v2 >= 2.34.0, < 2.34.2, fixed in 2.34.2
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.6%
Summary
Coder's AI Bridge provider handlers read request bodies with io.ReadAll and no maximum size, so an authenticated user with AI Bridge access can exhaust memory with an oversized or chunked body sent to endpoints such as /api/v2/aibridge/anthropic/v1/messages. Because AI Bridge runs in-process with coderd, the process crashes, taking down the API, workspace coordinator and DERP relay. The affected AI Bridge provider endpoints exist only on the v2.33 and v2.34 lines.
Mitigation
Fixed in v2.34.2 (2.34 line) and v2.33.8 (2.33 line). The fix applies http.MaxBytesReader or an equivalent cap before reading provider and session request bodies. No workarounds are listed in the source.
Related items
- MediumCVE-2026-107430: VideoWhisper Site Manager for ChatGPT, Claude, Codex missing authorization checkSame vendor · NVD/CVE Database
- HighCVE-2026-101998: Docker Sandboxes fail open when masking credentials in proxy responsesSame vendor · NVD/CVE Database
- HighCVE-2026-103435: Claude Code symlink race condition allows writes outside project directorySame vendor · NVD/CVE Database
- HighGHSA-6qxp-vccf-f47h: MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP serverSame vendor · GitHub Advisory Database
- HighCVE-2026-103012: Claude Code stored API key overrides organization policy sign-inSame vendor · NVD/CVE Database