Coder’s AI Bridge provider endpoints read request bodies using io.ReadAll without a maximum size, allowing an authenticated user with AI Bridge access to submit an arbitrarily large payload that consumes server heap memory until the process crashes. This flaw exemplifies uncontrolled resource consumption, classified as CWE‑770. The attack does not affect confidentiality or integrity; it merely disrupts service availability for the impacted organization.

The vulnerability exists in the Coder application, version 2.33.0 and all subsequent releases up to but not including 2.33.8 and 2.34.2. The affected product is Coder, a remote development environment provisioning platform accessed via its Terraform integration and AI Bridge APIs.

Rated with a moderate CVSS score of 6.5 and an EPSS score of < 1 %, the flaw is not listed in the CISA KEV catalog. Exploitation requires authenticated access to the AI Bridge endpoints, so the threat is confined to users with appropriate permissions within an organization. Attackers could trigger the denial of service by sending a large request body to the vulnerable endpoint; no publicly documented workarounds exist beyond disabling the feature or applying the patch.