This release includes 9 security fixes for security teams reviewing exposed deployments.
Published 1mo
Developer Productivity
✓ No known CVEs patched
This release patches 9 known CVEs
Topics
agents
dev-tools
development-environment
go
ide
jetbrains
+3 more
remote-development
terraform
vscode
Affected surfaces
auth
rbac
Summary
AI summaryBreaking changes in OIDC handling and security hardening across Server, Agent, Container image, and @zedkipp contributions.
Full changelog
Stable (since June 11, 2026)
Changelog
BREAKING CHANGES
- fix(coderd)!: restrict OIDC email fallback to first-time account linking (#25712, 36c011d7b6)
- fix!: reject OIDC login when email_verified claim is non-bool or absent (#25713, 335df24aeb)
- fix!: validate HostnameSuffix and SSHConfigOptions' (#26154, 6d0d4e0c1f)
- fix!: only trust x-forwarded-host from configured trusted proxies (conflicts) (#26204, fa46906be6) (@geokat)
Features
- Cli: add support for supplying ephemeral parameters at workspac… (#26279, 863eb7c852)
Bug fixes
- Clamp template port sharing level in SubAgentAPI (#26061, 0ff82f1cab)
- Require update permission to recreate devcontainers (#25812, 7fd2977acd)
- Escape agent log HTML (#25808, bdfdf6c873)
- Escape appearance values in HTML output (#25804, 345a88c78a)
- Always verify TLS on aibridgeproxyd upstream transport (#26131, d875dd1496)
- Allow lifecycle code path to retry failed stop jobs (#26277, 08471370a0)
- Agent: Prevent command injection in shell execer (#26235, 049f5b13cf) (@zedkipp)
- Server: Prevent cross-tenant workspace app rebinding (#26103, 071f067b3e) (@dylanhuff-at-coder)
- Validate agent-supplied AllowedIPs in coordinator (#26144, fa9d7a3b77) (@f0ssel)
- Server: Prevent user-admin from resetting owner password (#25709, fb9fe6389c)
- Reject oversized and invalid zip uploads (#25877, 97f9e3d670)
- Validate FileSize in NewDataBuilder to prevent OOM DoS (#25710, 15ff74af2f)
- Rename bundled rstudio.svg to rproject.svg, add real RStudio icon (#26216, d654d6d073)
- Use a random value for a simulated hash for built-in users (#26205, 53c25239f4)
- Server: Verify workspace owner matches app username (#26085, de927562e3)
- Prevent session token exfiltration via external app URLs (#26146, 91d18653f9) (@zedkipp)
- Add max bytes request limit to aibridge (#26164, 481857f23b)
- Check user user is active in aibridge auth (#26173, f9486be96d)
Compare: v2.33.7...v2.33.8
Container image
docker pull ghcr.io/coder/coder:2.33.8
Install/upgrade
Refer to our docs to install or upgrade Coder, or use a release asset below.
Breaking Changes
- Restrict OIDC email fallback to first-time account linking (coderd)
- Reject OIDC login when email_verified claim is non-bool or absent
- Validate HostnameSuffix and SSHConfigOptions'
- Only trust x-forwarded-host from configured trusted proxies
Security Fixes
- Prevent command injection in Agent shell execer (@zedkipp)
- Prevent cross-tenant workspace app rebinding (Server) (@dylanhuff-at-coder)
- Validate agent-supplied AllowedIPs in coordinator (@f0ssel)
- Prevent user-admin from resetting owner password (Server)
- Reject oversized and invalid zip uploads
- Validate FileSize in NewDataBuilder to prevent OOM DoS
- Prevent session token exfiltration via external app URLs (@zedkipp)
- Add max bytes request limit to aibridge
- Check user activity in aibridge auth
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Beta — feedback welcome: [email protected]