Session Cookie Leakage Vulnerability in CodexBar by Steipete

CVE-2026-43625

What is CVE-2026-43625?

A vulnerability exists in CodexBar prior to version 0.32.0 that enables attackers on the network path to intercept sensitive session cookies. This is due to improper handling of redirects associated with Amp and Ollama provider sessions. When a redirect from a provider-controlled target leads to a cleartext HTTP endpoint, the session cookies can be captured in plaintext format, posing a significant risk of session hijacking and unauthorized access to user accounts.

References