Read the docs
TI-2026-31730 Aliases CVE-2026-43625GHSA-x92v-hcjq-jcx7

CodexBar < 0.32.0 Session Cookie Exposure via HTTP Redirect

Priority LOW 35CWE-319Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
Present
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-319.

Summary

CodexBar prior to 0.32.0 contains a session cookie leakage vulnerability that allows network attackers to intercept imported browser session cookies by exploiting improper redirect handling for Amp and Ollama provider sessions. Attackers can position themselves on the network path to receive cleartext HTTP requests carrying imported session cookies when a provider-controlled redirect target issues a redirect to a cleartext HTTP endpoint within the same provider domain.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00186 8th percentileScored 2026-11-07
Fix Fixed CodexBar (steipete): 0.32.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
steipeteCodexBarbefore 0.32.00.32.0Patch availableCNA
  • CodexBar Vendorsteipete Affected before 0.32.0 Fixed in 0.32.0 Patch available CNA

Remediation

  • Fix · CNA CodexBar (steipete) Fixed in 0.32.0

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    steipete CodexBar 0.32.0

    3 records Highest priority Priority HIGH 2 HIGH, 1 LOW

    Other records, highest priority first

    • TI-2026-36349 CodexBar < 0.32.0 Privilege Escalation via CLI Installer Temp FilePriority HIGH 68
    • TI-2026-36350 CodexBar < 0.32.0 Insecure Temporary File Handling in Notarization WorkflowPriority HIGH 67
    Show all 3 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-43625
  2. 2026-10-03 Alias added: GHSA-x92v-hcjq-jcx7

References

Patch 2

Other 1

  • TI-2026-36349 CodexBar < 0.32.0 Privilege Escalation via CLI Installer Temp File CVSS 4.0HIGH 7.5
  • TI-2026-36350 CodexBar < 0.32.0 Insecure Temporary File Handling in Notarization Workflow CVSS 4.0HIGH 7.2
  • TI-2026-33049 Summarize < 0.15.1 Path Traversal via slidesDir Parameter CVSS 4.0HIGH 7.1
  • TI-2026-33037 Summarize Insecure Daemon Configuration File Permissions CVSS 4.0MEDIUM 6.9
  • TI-2026-33052 Summarize < 0.15.1 Unauthorized Daemon Request via Untrusted Events CVSS 4.0MEDIUM 4.6
  • TI-2026-33053 Summarize < 0.15.1 Insecure File Permissions Information Disclosure CVSS 4.0MEDIUM 6.8
See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences