CVE-2026-49135High· 7.1▾ MidnightPoC availableCodexBar prior to 0.32.0 contains an insecure temporary file handling vulnerability that allows local attackers to access sensitive credentials or tamper with build artifacts by exploiting predictable file paths in the release notarizati…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 39.1 · likelihood 0 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.1%
CodexBar prior to 0.32.0 contains an insecure temporary file handling vulnerability that allows local attackers to access sensitive credentials or tamper with build artifacts by exploiting predictable file paths in the release notarization workflow. Attackers with access to the same host can read the App Store Connect API key written to a fixed path, pre-create files or symbolic links at predictable locations to redirect writes to attacker-controlled destinations, or tamper with notarization archives before submission.
CodexBar < 0.32.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-49134High· 7.1CodexBar < 0.32.0 Privilege Escalation via CLI Installer Temp File
CVE-2026-43625Medium· 5.9CodexBar < 0.32.0 Session Cookie Exposure via HTTP Redirect
CVE-2026-49949Medium· 5.3CodexBar < 0.33.0 Credential Leakage via HTTP Redirect
CVE-2026-55480Medium· 5.7OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems
CVE-2026-93864High· 7.1Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root
CVE-2026-64672Medium· 4.4Terragrunt catalog predictable temp symlink clobber