CVE-2026-55427 | Coder up to 2.29.16/2.32.6/2.33.7/2.34.1 SSH Config HostnameSuffix/SSHConfigOptions injection

A vulnerability described as critical has been identified in Coder up to 2.29.16/2.32.6/2.33.7/2.34.1. Affected is an unknown function of the component SSH Config Handler. Executing a manipulation of the argument HostnameSuffix/SSHConfigOptions can lead to injection.

This vulnerability appears as CVE-2026-55427. The attack may be performed from remote. There is no available exploit.