CVE-2026-111926: Coder from 2.10.0 before 2.34.8 Information Disclosure via Agent /debug/manifest
Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest handler returns the full agent manifest, including template-provided environment variable values. A lower-privileged Unix user or process in the same workspace can query this endpoint to read credentials such as cloud keys or registry tokens.
Affected Software
Event History
Frequently Asked Questions
Who can access the exposed manifest endpoint?
A lower-privileged Unix user or process running in the same workspace can query the agent debug server on 127.0.0.1:2113. The endpoint is unauthenticated, but it is bound to localhost rather than described as remotely reachable.
What information could be disclosed?
The /debug/manifest endpoint returns the full agent manifest, including environment-variable values supplied by the template. Exposed values may include credentials such as cloud keys or registry tokens.
Which deployments are affected?
Affected versions are Coder 2.10.0 through versions before 2.34.8. A workspace is exposed when an untrusted or lower-privileged local user or process can run within that same workspace and query localhost.
How can I check for exposure?
From within a workspace, check whether an HTTP service is listening on 127.0.0.1:2113 and whether requesting /debug/manifest returns an agent manifest without authentication. Review returned manifest data for template-provided environment-variable values, especially secrets.