EUVD-2026-33751
GHSA-8v4r-w49g-jc9w
Severity by source
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (VulnCheck) · only source for this CVE.
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
6DescriptionCVE.org
CodexBar prior to 0.32.0 contains an insecure temporary file handling vulnerability that allows local attackers to access sensitive credentials or tamper with build artifacts by exploiting predictable file paths in the release notarization workflow. Attackers with access to the same host can read the App Store Connect API key written to a fixed path, pre-create files or symbolic links at predictable locations to redirect writes to attacker-controlled destinations, or tamper with notarization archives before submission.
AnalysisAI
Local privilege-level information disclosure and artifact tampering in CodexBar versions prior to 0.32.0 allows authenticated users on the same macOS host to read App Store Connect API keys and hijack release builds via predictable temporary file paths in the notarization workflow. The flaw stems from writing sensitive credentials and notarization archives to fixed, world-reachable locations rather than per-run private directories, enabling symlink races and pre-creation attacks. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Technical ContextAI
CodexBar is a macOS menu bar utility (cpe:2.3:a:steipete:codexbar) that provides dashboards and status for AI coding providers such as Codex, Claude, and Antigravity. The vulnerable component is its release/notarization tooling, which historically staged the Apple App Store Connect API key and the ZIP archives submitted to Apple's notarization service in a shared, predictable directory (effectively a fixed path under /tmp). CWE-377 (Insecure Temporary File) captures the root cause: a temporary file is created in a location an attacker can predict and racily pre-populate with a regular file or symlink before the privileged writer touches it, breaking the implicit confidentiality and integrity assumptions of the workflow.
RemediationAI
Vendor-released patch: upgrade CodexBar to 0.32.0 or later, which isolates notarization API keys and upload ZIPs in a private per-run temporary directory rather than predictable shared /tmp paths (see https://github.com/steipete/CodexBar/releases/tag/v0.32.0 and commit https://github.com/steipete/CodexBar/commit/e7d932616508cee43ea9bcc63c269b14698de655). If immediate upgrade is not possible, run release/notarization only on single-user macOS hosts and avoid shared build agents, set restrictive umask (077) for the release user and pre-create a private mkdtemp-style staging directory owned solely by that user, and rotate any App Store Connect API key that may have been written to a predictable path during prior runs (rotation invalidates any previously stolen key but requires re-distributing the new key to legitimate signers).
Cleartext session cookie exposure in CodexBar (a macOS menu bar AI provider client) prior to 0.32.0 allows network-posit
Local privilege escalation in CodexBar prior to 0.32.0 allows a same-user attacker to execute arbitrary commands as root
Credential interception in CodexBar before 0.33.0 exposes API keys, bearer tokens, and browser cookies to network-adjace
Same weakness CWE-377 – Insecure Temporary File
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today