Affected by GO-2026-5169 and 18 other vulnerabilities

GO-2026-5169: Coder: Unauthenticated SSRF via Azure Instance Identity Endpoint in github.com/coder/coder

GO-2026-5196: Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft in github.com/coder/coder

GO-2026-5906: Coder: User-admin role can reset owner account password in github.com/coder/coder

GO-2026-5907: Coder's OIDC email_verified type coercion bypass enables account takeover via unverified email linking in github.com/coder/coder

GO-2026-5908: Coder vulnerable to OIDC account takeover via email-based user matching and email_verified bypass in github.com/coder/coder

GO-2026-5909: Coder's workspace app upsert allows cross-workspace agent rebinding via user-controlled app ID in github.com/coder/coder

GO-2026-5911: Coder's unbounded memory allocation in provisioner file upload allows authenticated denial of service in github.com/coder/coder

GO-2026-5913: Coder vulnerable to SSH config injection via unsanitized server-supplied values in `coder config-ssh` in github.com/coder/coder

GO-2026-5915: Coder: Route hijacking through lack of validation of agent-supplied AllowedIPs in tailnet coordinator in github.com/coder/coder

GO-2026-5916: Coder: Zip upload decompression lacks aggregate size limit, enabling denial of service in github.com/coder/coder

GO-2026-5917: Coder's subdomain workspace app routing trusts unauthenticated X-Forwarded-Host header, enabling cross-app data access in github.com/coder/coder

GO-2026-5918: Coder's workspace app CORS origin check can be bypassed via UUID-based subdomain spoofing in github.com/coder/coder

GO-2026-5919: Coder vulnerable to stored HTML injection via workspace agent logs in AgentLogLine component in github.com/coder/coder

GO-2026-5922: Coder: Devcontainer recreate endpoint missing write authorization allows read-only roles to destroy containers in github.com/coder/coder

GO-2026-5923: Coder's workspace agent API insecure redirect handling allowed cross-agent file read and write in github.com/coder/coder

GO-2026-5924: Coder's session token leaked to arbitrary hosts via `coder open app` for external workspace apps in github.com/coder/coder

GO-2026-5926: Coder's sub-agent app registration bypasses template port-sharing policy enforcement in github.com/coder/coder

GO-2026-6265: Coder: Login endpoint user enumeration via timing-defense placeholder in password comparison in github.com/coder/coder

GO-2026-6267: Coder: Stored HTML injection via unescaped ApplicationName and LogoURL appearance settings in github.com/coder/coder

provisionerd

package

v2.29.11 Latest Latest Go to latest Published: Apr 28, 2026 License: AGPL-3.0 Imports: 30 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/coder/coder

Links

Open Source Insights

Documentation ¶

Index ¶

func AuthenticateProvisioner(conn io.ReadWriter, token, jobID string) error
func DialTLS(ctx context.Context, cert, addr string) (*tls.Conn, error)
func EphemeralEcho(ctx context.Context, logger slog.Logger, ...) error
func GenCert() (*ecdsa.PrivateKey, []byte, error)
func NewRemoteConnector(ctx context.Context, logger slog.Logger, exec Executor) (agpl.Connector, error)
type Executor

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func AuthenticateProvisioner ¶

func AuthenticateProvisioner(conn io.ReadWriter, token, jobID string) error

AuthenticateProvisioner performs the provisioner's side of the authentication protocol.

func DialTLS ¶

func DialTLS(ctx context.Context, cert, addr string) (*tls.Conn, error)

DialTLS establishes a TLS connection to the given addr using the given cert as the root CA

func EphemeralEcho ¶

func EphemeralEcho(
	ctx context.Context,
	logger slog.Logger,
	cacheDir, jobID, token, daemonCert, daemonAddress string,
) error

EphemeralEcho starts an Echo provisioner that connects to provisioner daemon, handles one job, then exits.

func GenCert ¶

func GenCert() (*ecdsa.PrivateKey, []byte, error)

GenCert is a helper function that generates a private key and certificate. It is exported so that we can test a certificate generated in exactly the same way, but with a different private key.

func NewRemoteConnector ¶

func NewRemoteConnector(ctx context.Context, logger slog.Logger, exec Executor) (agpl.Connector, error)

Types ¶

type Executor ¶

type Executor interface {
	// Execute a provisioner that connects back to the remoteConnector.  errCh
	// allows signaling of errors asynchronously and is closed on completion
	// with no error.
	Execute(
		ctx context.Context,
		provisionerType database.ProvisionerType,
		jobID, token, daemonCert, daemonAddress string) (errCh <-chan error)
}

Executor is responsible for executing the remote provisioners.

TODO: this interface is where we will run Kubernetes Jobs in a future version; right now, only the unit tests implement this interface.

Source Files ¶

View all Source files

remoteprovisioners.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL