Coder's workspace agent API had insecure redirect handling that allowed an authenticated user controlling a modified workspace agent to redirect HTTP requests to another agent's UUID. The redirects were followed by agentConn.apiClient while the custom transport accepted the host from the redirected request URL when the port matched the workspace agent HTTP API. This flaw permitted read and write operations on the victim workspace user's file system and, in affected versions exposing the workspace agent process API, enabled execution of commands after a redirected file write. The vulnerability effectively bypasses workspace and tenant boundaries, granting elevated privileges.

The issue affects the Coder platform provided by coder:coder. All released versions prior to 2.29.19, 2.32.9, 2.33.10, and 2.34.4 are impacted. Users running these versions should be aware that the flaw exists until they upgrade to a patched release.

The CVSS v3.1 score of 8.3 indicates a high severity flaw. The EPSS score is not available, and the vulnerability is not listed in CISA's KEV catalog, suggesting it has not yet been widely exploited. Attackers require an authenticated session with a modified agent and knowledge of a victim agent's UUID; therefore, the attack surface is bounded to environments where malicious agents can be introduced. However, once an agent is compromised, any workspace user’s files and processes can be accessed or altered, posing a significant risk to data integrity and confidentiality.