CVE-2026-55428 | Coder up to 2.29.16/2.32.6/2.33.7/2.34.1 Tailnet Coordinator AllowedIPs input validation

A vulnerability classified as critical has been found in Coder up to 2.29.16/2.32.6/2.33.7/2.34.1. Affected by this vulnerability is an unknown functionality of the component Tailnet Coordinator. The manipulation of the argument AllowedIPs leads to improper input validation.

This vulnerability is traded as CVE-2026-55428. It is possible to initiate the attack remotely. There is no exploit available.