Buffer Overflow Vulnerability in Coder's Remote Development Environment Provisioner
CVE-2026-55079
What is CVE-2026-55079?
A buffer overflow vulnerability exists in Coder's remote development environment due to insufficient validation of the 'FileSize' parameter in the DataUpload message. This flaw allows for the allocation of a byte slice without enforcing an upper limit, potentially leading to memory corruption. Although the DRPC wire limit is set to 4 MiB, the FileSize remains unconstrained in affected versions (2.24.0 up to 2.29.6 and between 2.32.0 to 2.34.1). The issue has been addressed in later versions, where the FileSize is now validated against a maximum size of 100 MiB. Users are advised to update their installations and limit access to the provisioner daemon serve endpoint to secure service accounts as a temporary measure.
Affected Version(s)
coder >= 2.34.0, < 2.34.2 < 2.34.0, 2.34.2
coder >= 2.33.0, < 2.33.8 < 2.33.0, 2.33.8
coder >= 2.30.0, < 2.32.7 < 2.30.0, 2.32.7