{"uuid": "5ba1c866-33b4-44fd-b4a9-8152edb917d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46354", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mq3l74tvwf2v", "content": "CVE-2026-46354 - coder\nAn attacker can steal a Coder agent session token by sending a forged request to the Azure instance identity endpoint. This allows them to access sensitive information, such as Git SSH\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coder #Golang #CVE #infosec", "creation_timestamp": "2026-07-07T21:44:05.055193Z"}