EUVD-2026-36302
GHSA-42m6-xh7c-6xm4
Severity by source
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network vector requires MITM redirect injection (AC:H); no attacker privileges needed (PR:N); victim must trigger a request (UI:R); only credentials are exposed (C:H, I:N, A:N).
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
2DescriptionCVE.org
CodexBar before 0.33.0 contains a credential forwarding vulnerability that allows network-adjacent attackers to intercept sensitive credentials by issuing cross-origin or HTTP-downgrade redirects to the shared ProviderHTTPClient transport. Attackers can redirect credentialed provider requests carrying browser cookies, bearer tokens, or API keys to an unintended host, port, or plaintext HTTP destination to capture those credentials.
AnalysisAI
Credential interception in CodexBar before 0.33.0 exposes API keys, bearer tokens, and browser cookies to network-adjacent attackers through the shared ProviderHTTPClient transport's failure to validate redirect destinations. When a user initiates a credentialed request to an AI provider backend, an attacker positioned to inject redirect responses can steer the transport to a cross-origin host or a plaintext HTTP endpoint, causing CodexBar to forward the original credentials to the attacker-controlled destination. No active exploitation confirmed (not in CISA KEV) and no public exploit code identified at time of analysis, but the high confidentiality impact warrants prompt patching - especially for users on shared or untrusted networks.
Technical ContextAI
CodexBar (CPE: cpe:2.3:a:steipete:codexbar:*:*:*:*:*:*:*:*) is a macOS menu bar application by steipete that brokers connections to multiple AI providers including Copilot, Codex, Vertex AI, and Doubao. The affected component is the shared ProviderHTTPClient transport - a common HTTP client used across all provider integrations to issue credentialed requests. CWE-522 (Insufficiently Protected Credentials) captures the root cause: the transport forwarded authentication material (browser cookies, bearer tokens, API keys) through HTTP redirects without verifying that the redirect destination remained within the original HTTPS origin. This enabled two exploit paths: cross-origin redirects (attacker-controlled host on a different domain) and HTTP-downgrade redirects (HTTPS origin redirected to a plaintext HTTP endpoint), both of which expose credentials in transit. The fix in v0.33.0 via PR #1237 and commit 08c171b6b487654a0eb188494fa24bd1c4272a2e introduces origin-scope enforcement that blocks outbound credentialed redirects leaving the original HTTPS origin while preserving legitimate same-origin redirects.
RemediationAI
The primary fix is upgrading to CodexBar v0.33.0 or later, which blocks credentialed provider redirects that exit the original HTTPS origin (PR #1237, commit 08c171b6b487654a0eb188494fa24bd1c4272a2e). The release is available at https://github.com/steipete/CodexBar/releases/tag/v0.33.0. For users who cannot upgrade immediately, the most actionable compensating control is to avoid using CodexBar on shared or untrusted network segments (public Wi-Fi, hotel networks, conference networks) where an attacker could achieve MITM positioning to inject redirect responses - this directly addresses the AC:H condition required for exploitation. As a secondary measure, rotate any API keys, bearer tokens, or session credentials associated with CodexBar provider integrations if there is any suspicion of prior exposure; note that credential rotation addresses the impact of past exploitation but does not close the transport-layer flaw in unpatched versions. No workaround exists that fully mitigates the underlying redirect validation gap without upgrading.
Cleartext session cookie exposure in CodexBar (a macOS menu bar AI provider client) prior to 0.32.0 allows network-posit
Local privilege escalation in CodexBar prior to 0.32.0 allows a same-user attacker to execute arbitrary commands as root
Local privilege-level information disclosure and artifact tampering in CodexBar versions prior to 0.32.0 allows authenti
Same weakness CWE-522 – Insufficiently Protected Credentials
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today