Coder’s AI Bridge provider controllers take request bodies with io.ReadAll without imposing a size limit. An authenticated user who can reach the AI Bridge endpoints can send an arbitrarily large body, causing the server process to consume excessive heap memory and eventually crash. This flaw exemplifies uncontrolled resource consumption, classified as CWE‑770. The attack does not compromise confidentiality or integrity; it simply disrupts service availability for the affected organization.

The flaw is present in the Coder application from version 2.33.0 up to, but not including, releases 2.33.8 and 2.34.2. The affected product is Coder, the remote development environment provisioning platform, accessible through its Terraform integration and AI Bridge APIs.

The vulnerability is assigned a moderate CVSS score of 6.5. The EPSS score is < 1 the CISA KEV catalog. Because the attacker must be authenticated and have AI Bridge access, the threat is constrained to users with appropriate privileges within an organization. The impact is limited to availability, and no publicly documented evasions or workarounds exist.