CVE-2026-111931

EUVD-2026-103298
Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling that allows attackers to redirect users externally via unsanitized r.URL.Path values. Attackers can craft links on trusted workspace app subdomains with paths beginning with double slashes, which become scheme-relative redirects to attacker sites for phishing.
Open Redirect
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulnCheckCNA
4.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 5.45%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
codercoder
2.0.0 ≤
𝑥
< 2.34.8
CNA
Common Weakness Enumeration
References
https://github.com/coder/coder/security/advisories/GHSA-98qx-9p2x-c4wh
https://www.vulncheck.com/advisories/coder-2.0.0-before-2.34.8-open-redirect-via-workspace-app-proxy