CVE-2026-49134 | BDVDB-2026-337141 Detail

Description#

CodexBar prior to 0.32.0 contains a privilege escalation vulnerability in the CLI installer that allows local attackers to execute arbitrary commands as root by exploiting a race condition in temporary file handling. The installer creates a temporary file with mktemp, writes a privileged shell payload into it, and executes it with administrator privileges via bash, allowing a same-user local process to rewrite the installer body before the administrator prompt is approved, causing attacker-controlled commands to run as root.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-06-01Record published in the CVE List.
2. Version 22026-11-08Most recent update recorded in the CVE List.