Skip to content
AI Sec Watch
HighVulnerability

GHSA-84rm-42xw-mx52: Coder's AI Bridge Proxy skips TLS certificate verification in default configuration

Source
GitHub Advisory(opens in a new tab)
Identifiers
CVE-2026-55436GHSA-84rm-42xw-mx52
Published
Record updated
View JSON
Affected
  • github.com/coder/coder/v2 >= 2.30.0, < 2.32.7, fixed in 2.32.7
  • github.com/coder/coder/v2 >= 2.33.0, < 2.33.8, fixed in 2.33.8
  • github.com/coder/coder/v2 >= 2.34.0, < 2.34.2, fixed in 2.34.2
Known exploitation
Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
EPSS
0.3%

Summary

Coder's AI Bridge Proxy (`aibridgeproxyd`) set `InsecureSkipVerify: true` in the default transport of its goproxy server, so outbound HTTPS to the Coder access URL accepted any TLS certificate when no upstream proxy was configured. An on-path attacker could intercept Coder session tokens, BYOK provider API keys and full prompt and completion bodies, and the default transport also honored `HTTP_PROXY` and `HTTPS_PROXY`. The AI Bridge Proxy was introduced in v2.30.0, and the v2.29 ESR line is not affected.

Mitigation

Fixed in v2.34.2 (2.34 line), v2.33.8 (2.33 line) and v2.32.7 (2.32 line). The fix applies the secure transport (TLS 1.2 or higher using system root CAs) unconditionally. Workaround: ensure the Coder access URL uses a trusted certificate and secure the network path between the AI Bridge Proxy and the Coder server (for example, loopback or mTLS).

Related items