What is the CVSS score of CVE-2025-66411?

CVE-2025-66411 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Kubernetes are affected by CVE-2025-66411?

Coder versions prior to 2.26.5, 2.27.7, and 2.28.4 expose sensitive configuration values in plaintext logs, creating a credential disclosure risk for any user or system with access to workspace agent…. A patch is available.

Is there a public PoC exploit available for CVE-2025-66411?

Yes, a public proof-of-concept exploit is available for CVE-2025-66411. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2025-66411?

Within 24 hours: Identify all Coder deployments and their current versions; audit access logs for evidence of unauthorized log access. Within 7 days: Upgrade all Coder instances to 2.26.5, 2.27.7, or 2.28.4; rotate any credentials that may have been logged prior to patching. Within 30 days: Review and strengthen access controls on logging systems (SIEM, log aggregators); implement log sanitization policies for sensitive data going forward; document remediation completion.

Kubernetes CVE-2025-66411

EUVD-2025-201015 HIGH

Insertion of Sensitive Information into Log File (CWE-532)

2025-12-03 security-advisories@github.com

GHSA-jf75-p25m-pw74

Kubernetes Information Disclosure Coder Suse

7.8

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SUSE

HIGH

qualitative

Primary rating from GitHub Advisory.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 16:14 euvd

EUVD-2025-201015

Analysis Generated

Mar 15, 2026 - 16:14 vuln.today

Patch released

Mar 15, 2026 - 16:14 nvd

Patch available

PoC Detected

Feb 13, 2026 - 16:09 vuln.today

Public exploit code

CVE Published

Dec 03, 2025 - 20:16 nvd

HIGH 7.8

DescriptionGitHub Advisory

Coder allows organizations to provision remote development environments via Terraform. Prior to 2.26.5, 2.27.7, and 2.28.4, Workspace Agent manifests containing sensitive values were logged in plaintext unsanitized. An attacker with limited local access to the Coder Workspace (VM, K8s Pod etc.) or a third-party system (SIEM, logging stack) could access those logs. This vulnerability is fixed in 2.26.5, 2.27.7, and 2.28.4.

Analysis

Technical ContextAI

Information disclosure occurs when an application inadvertently reveals sensitive data to unauthorized actors through error messages, logs, or improper access controls. This vulnerability is classified as Insertion of Sensitive Information into Log File (CWE-532).

RemediationAI

A vendor patch is available — apply it immediately. Implement proper access controls. Sanitize error messages in production. Review logging practices to avoid capturing sensitive data.