Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest handler returns the full… (CVE-2026-111926)

Coder versions >=2.10.0 and <2.34.8 run an unauthenticated debug HTTP server bound to 127.0.0.1:2113. The /debug/manifest handler returns the complete agent manifest, which includes environment variable values injected by templates. This information disclosure vulnerability enables a local lower-privileged user or process in the same workspace to retrieve sensitive credentials like cloud keys or registry tokens by querying this endpoint. The CVSS 3.1 vector is AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N, indicating local attack vector with low complexity and low impact on confidentiality.

An attacker with local access as a lower-privileged Unix user or process in the same workspace can obtain sensitive environment variables containing credentials such as cloud keys or registry tokens. This can lead to unauthorized access to cloud resources or container registries. The impact is limited to confidentiality and requires local access, thus rated medium severity.

No explicit patch or remediation is stated in the provided data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local user access to the affected Coder workspace environments to trusted users only and monitor for unauthorized local activity.