The vulnerability is an unauthenticated debug HTTP endpoint that returns the agent manifest, containing sensitive configuration values. An attacker who can reach the agent’s local socket can retrieve credentials such as cloud keys or registry tokens, allowing disclosure of secrets and potential lateral movement across the workspace. This is a classic information disclosure flaw, CWE‑200.

The flaw affects Coder installations from version 2.10.0 up to but not including 2.34.8. Any deployment of the coder:coder product that has not been updated to 2.34.8 or later is vulnerable. The agent runs on localhost and is typically accessible to any user or process with workspace access.

The CVSS score 4.8 indicates a low severity assessment, but exploitation is possible from a lower‑privileged Unix user or process within the same workspace. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is local; although the port is bound to 127.0.0.1, any entity with workspace rights can hit the endpoint and obtain secrets.