CVE-2026-46354 - Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft
CVE ID :CVE-2026-46354 Published : July 7, 2026, 10:16 p.m. | 58 minutes ago Description :Coder allows organizations to provision remote development environments via Terraform. In versions prior tp 2.24.5, 2.29.13, 2.30.8, 2.31.12, 2.32.2, and 2.33.3, `azureidentity.Validate()` verifies that...