Privilege Escalation in CodexBar CLI Installer by Vendor Steipete

CVE-2026-49134

What is CVE-2026-49134?

The CodexBar CLI installer version prior to 0.32.0 features a vulnerability that permits local attackers to escalate their privileges. By exploiting a race condition in the handling of temporary files, an attacker can execute arbitrary commands as root. The vulnerability arises when the installer utilizes mktemp to create a temporary file and subsequently writes a privileged shell payload into that file. During the execution process, if a user operates a local process with the same user permissions, they can alter the contents of the installer before the prompt for administrator approval is presented. This flaw enables the execution of attacker-controlled commands with elevated privileges, posing significant security risks.

References