CyberRota Analysis
AI-GeneratedThe vulnerability affects the tailnet coordinator in Coder's remote development environment provisioning, where it fails to validate `AllowedIPs` against the authenticated UUID, potentially allowing unauthorized IP addresses to be forwarded to tunnel peers. This oversight can lead to unauthorized access and data exposure within the network. Organizations using affected versions should prioritize updating to the fixed versions or implement monitoring of coordinator logs for unexpected `AllowedIPs` to mitigate risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the tailnet coordinator validates that an agent's `Addresses` derive from its authenticated UUID but applies no equivalent check to `AllowedIPs`. The coordinator forwards agent-supplied `AllowedIPs` verbatim to tunnel peers which install them into the WireGuard peer configuration. The fix in versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2 validates each `AllowedIPs` prefix against the authenticating agent's UUID just like `Addresses`. As a workaround, monitor coordinator logs for agents advertising unexpected `AllowedIPs` prefixes.
Related CVEs
Other vulnerabilities affecting the same vendor(s)