Skip to content
AI Sec Watch
MediumVulnerabilityLLM-specific

GHSA-wqxv-w64v-5wh6: Suspended Coder users retain access to AI Bridge LLM proxy endpoints

Source
GitHub Advisory(opens in a new tab)
Identifiers
CVE-2026-55435GHSA-wqxv-w64v-5wh6
Published
Record updated
View JSON
Affected
  • github.com/coder/coder/v2 >= 2.30.0, < 2.32.7, fixed in 2.32.7
  • github.com/coder/coder/v2 >= 2.33.0, < 2.33.8, fixed in 2.33.8
  • github.com/coder/coder/v2 >= 2.34.0, < 2.34.2, fixed in 2.34.2
Known exploitation
Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
EPSS
0.3%

Summary

Coder's AI Bridge authorization logic, implemented in `Server.IsAuthorized` in `coderd/aibridgedserver`, does not check whether a user account is suspended, so a suspended user's unexpired API key keeps working against AI Bridge LLM proxy endpoints. The flaw affects AI Bridge from v2.30.0 onward, and the v2.29 ESR line is not affected. An attacker holding such a token can consume paid provider resources billed to the deployment and, if injected MCP tools are enabled, invoke those tools until the token expires.

Mitigation

Fixed in v2.34.2 (2.34 line), v2.33.8 (2.33 line) and v2.32.7 (2.32 line). Workaround: on suspension, delete the user's API keys via `DELETE /api/v2/users/{user}/keys`.

Topics

Related items