CVE-2026-55435 | Coder up to 2.32.6/2.33.7/2.34.1 AI Bridge Proxy Endpoint coderd/aibridgedserver IsAuthorized improper authorization

A vulnerability described as problematic has been identified in Coder up to 2.32.6/2.33.7/2.34.1. The affected element is the function IsAuthorized of the file coderd/aibridgedserver of the component AI Bridge Proxy Endpoint. The manipulation results in improper authorization.

This vulnerability was named CVE-2026-55435. The attack may be performed from remote. There is no available exploit.