SSH Configuration Injection Vulnerability in Coder by Coder
CVE-2026-55427
What is CVE-2026-55427?
A vulnerability in Coder allows potential attackers to inject arbitrary SSH configurations through server-supplied settings such as 'HostnameSuffix' and 'SSHConfigOptions'. This occurs when the command 'coder config-ssh' writes these settings directly to the user's SSH configuration file without proper validation or sanitization. An attacker could exploit this vulnerability by controlling the parameters sent from a compromised Coder server or through a man-in-the-middle attack. Updated versions (2.29.7, 2.32.7, 2.33.8, and 2.34.2) have introduced strict validation measures to prevent such exploits. Users are advised to inspect configurations using the 'coder config-ssh --dry-run' command prior to applying any changes.
Affected Version(s)
coder >= 2.34.0, < 2.34.2 < 2.34.0, 2.34.2
coder >= 2.33.0, < 2.33.8 < 2.33.0, 2.33.8
coder >= 2.30.0, < 2.32.7 < 2.30.0, 2.32.7