Skip to content

CVE record · 1 source

CVE-2026-111929

CVSS 5.3

Coder from 2.30.0 before 2.34.8 contains an authorization bypass vulnerability in the provisioner daemon DownloadFile gRPC handler that allows…

Vendor: HashiCorp
Product: Vault / Terraform / Consul / Nomad
CVSS: 5.3
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

8

CVE NVD 14d ago

Coder from 2.30.0 before 2.34.8 contains an authorization bypass vulnerability in the provisioner daemon DownloadFile gRPC handler that allows…

Coder from 2.30.0 before 2.34.8 contains an authorization bypass vulnerability in the provisioner daemon DownloadFile gRPC handler that allows authenticated provisioner daemons to download other organizations' cached Terraform…

CVSS 5.3 CVE-2026-111929 HashiCorp