CVE-2026-49135highCWE-377CWE-59

CVE-2026-49135: high-severity vulnerability in steipete CodexBar

CodexBar < 0.32.0 Insecure Temporary File Handling in Notarization Workflow

Published · Updated

Follow this CVE+ Monitor CodexBar

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.2epss 0.1%
CodexBar prior to 0.32.0 contains an insecure temporary file handling vulnerability that allows local attackers to access sensitive credentials or tamper with build artifacts by exploiting predictable file paths in the release notarization workflow. Attackers with access to the same host can read the App Store Connect API key written to a fixed path, pre-create files or symbolic links at predictable locations to redirect writes to attacker-controlled destinations, or tamper with notarization archives before submission.
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Affected products
steipete · CodexBar
Related CVEs — steipete CodexBar

In the same product, most dangerous first.

CVE-2026-49134HIGHCodexBar < 0.32.0 Privilege Escalation via CLI Installer Temp FileEPSS 0.3%CVE-2026-49949MEDIUMCodexBar < 0.33.0 Credential Leakage via HTTP RedirectEPSS 0.3%CVE-2026-43625HIGHCodexBar < 0.32.0 Session Cookie Exposure via HTTP RedirectEPSS 0.2%