{"id":"CVE-2026-121967","published":"2026-11-04T16:17:50.360","lastModified":"2026-11-04T19:17:38.527","description":"Coder 2.28.0 before 2.29.22, 2.30.0 before 2.34.13, 2.35.0 before 2.35.10, 2.36.0 before 2.36.8, 2.37.0 before 2.37.5, and 2.38.0 before 2.38.1 contains a path traversal vulnerability in the AI Gateway passthrough router, which forwards percent-encoded dot segments upstream without rejecting them. Authenticated users can send paths such as %2e%2e or ..%2F under allowlisted prefixes to reach unintended provider endpoints using the deployment's centrally managed provider key.","cvssScore":4.9,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N","cwes":["CWE-22"],"vendors":[],"products":[],"references":[{"url":"https://github.com/coder/coder/pull/30178","tags":[]},{"url":"https://github.com/coder/coder/security/advisories/GHSA-373r-678h-hjc6","tags":[]},{"url":"https://www.vulncheck.com/advisories/coder-before-2.29.22-2.34.13-2.35.10-2.36.8-2.37.5-and-2.38.1-ai-gateway-path-traversal","tags":[]}],"exploitRefs":[{"url":"https://github.com/coder/coder/pull/30178","tags":[]},{"url":"https://github.com/coder/coder/security/advisories/GHSA-373r-678h-hjc6","tags":[]}],"hasPoc":true,"ai":null}