CVE-2026-111927: Coder Improper Hostname Validation Flaw
A vulnerability in Coder versions before 2.29.20, 2.33.12, 2.34.8, and 2.35.4 allows attackers to exploit an improper hostname validation flaw, potentially leading to unauthorized access to workspace applications. The vulnerability has a CVSS score of 7.7 and is considered high severity. Administrators should update Coder to a patched version to mitigate this vulnerability.