MEDIUMCVSS v3.1 4.9Vulnerability
CVE-2026-121967
Coder 2.28.0 before 2.29.22, 2.30.0 before 2.34.13, 2.35.0 before 2.35.10, 2.36.0 before 2.36.8, 2.37.0 before 2.37.5, and 2.38.0 before 2.38.1 contains a path traversal vulnerability in the AI Gateway passthrough router, which forwards percent-encoded dot segments upstream without rejecting them. Authenticated users can send paths such as %2e%2e or ..%2F under allowlisted prefixes to reach unintended provider endpoints using the deployment's centrally managed provider key.
Properties
- Severity
- MEDIUM
- Nvd fetched at
- 2026-11-04T17:37:42.865599+00:00
- Cvss score
- 4.9
- Cvss severity
- MEDIUM
- Retrieved at
- 2026-11-04T17:38:51+00:00
- Score
- 4.9
- Last source
- NVD
- Cvss version
- 3.1
- Cve id
- CVE-2026-121967
- Cvss vector
- CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
- First seen by Signal
- 2026-11-04T17:38:51+00:00
- Vector
- CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
- Published at
- 2026-11-04T16:17:50.360
- Last modified
- 2026-11-04T16:17:50.360
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph