CVE-2025-58437
Essential information
- Published
- 06/09/2025 03:15
- Modified
- 06/09/2025 03:15
- Author
- —
- Creator
- —
- CVSS
- 8.1 HIGH (v3.1)
- CISA KEV
- No
- CWE
- —
- CVSS vector
-
—
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N—
CVSS metrics
- Access vector
- —
- Access complexity
- —
- Authentication
- —
- Confidentiality impact
- —
- Integrity impact
- —
- Availability impact
- —
- Exploitability
- —
- Remediation level
- —
- Report confidence
- —
- Temporal score
- —
- Attack vector
- NETWORK
- Attack complexity
- LOW
- Privileges required
- LOW
- User interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality impact
- HIGH
- Integrity impact
- HIGH
- Availability impact
- NONE
- Exploit code maturity
- —
- Remediation level
- —
- Report confidence
- —
- Temporal score
- —
- Attack vector
- —
- Attack complexity
- —
- Attack requirements
- —
- Privileges required
- —
- User interaction
- —
- Confidentiality (V)
- —
- Confidentiality (S)
- —
- Integrity (V)
- —
- Integrity (S)
- —
- Availability (V)
- —
- Availability (S)
- —
- Exploit maturity
- —
Description
Coder allows organizations to provision remote development environments via Terraform. In versions 2.22.0 through 2.24.3, 2.25.0 and 2.25.1, Coder can be compromised through insecure session handling in prebuilt workspaces. Coder automatically generates a session token for a user when a workspace is started. It is automatically exposed via coder_workspace_owner.session_token. Prebuilt workspaces are initially owned by a built-in prebuilds system user. When a prebuilt workspace is claimed, a new session token is generated for the user that claimed the workspace, but the previous session token for the prebuilds user was not expired. Any Coder workspace templates that persist this automatically generated session token are potentially impacted. This is fixed in versions 2.24.4 and 2.25.2.
NVD status
- Status
- Received — CVE has been recently published to the CVE List and has been received by the NVD.
- Source
- [email protected]
- NVD
- View on NVD
Affected products (CPE)
| Product | CPE |
|---|---|
| coder / coder | cpe:2.3:a:coder:coder:2.22.0:*:*:*:*:*:*:* |
| coder / coder | cpe:2.3:a:coder:coder:2.23.0:*:*:*:*:*:*:* |
| coder / coder | cpe:2.3:a:coder:coder:2.24.0:*:*:*:*:*:*:* |
| coder / coder | cpe:2.3:a:coder:coder:2.24.1:*:*:*:*:*:*:* |
| coder / coder | cpe:2.3:a:coder:coder:2.24.2:*:*:*:*:*:*:* |
| coder / coder | cpe:2.3:a:coder:coder:2.24.3:*:*:*:*:*:*:* |
| coder / coder | cpe:2.3:a:coder:coder:2.25.0:*:*:*:*:*:*:* |
| coder / coder | cpe:2.3:a:coder:coder:2.25.1:*:*:*:*:*:*:* |