CVE-2025-66411 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Coder allows organizations to provision remote development environments via Terraform. Prior to 2.26.5, 2.27.7, and 2.28.4, Workspace Agent manifests containing…
High CVSS: 7.8

CVE-2025-66411

Coder allows organizations to provision remote development environments via Terraform. Prior to 2.26.5, 2.27.7, and 2.28.4, Workspace Agent manifests containing sensitive values were logged in plaintext unsanitized. An attacker with limited local access to the Coder Workspace (VM, K8s Pod etc.) or a third-party system (SIEM, logging stack) could access those logs. This vulnerability is fixed in 2.26.5, 2.27.7, and 2.28.4.
Vendor
Coder
Product
Coder
CWE
CWE-532
Yayın Tarihi
2025-12-03 20:16:26
Güncelleme
2026-02-13 16:09:09
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-532 Coder HIGH Coder 2025

Referanslar

https://github.com/coder/coder/commit/e2a46393fce40bc630df3293c1ee66a596277289 https://github.com/coder/coder/releases/tag/v2.26.5 https://github.com/coder/coder/releases/tag/v2.27.7 https://github.com/coder/coder/releases/tag/v2.28.4 https://github.com/coder/coder/security/advisories/GHSA-jf75-p25m-pw74