# CVE-2026-49135: CodexBar insecure temporary file handling in notarization workflow

Source: https://junglewise.ai/threats/cve-2026-49135-codexbar-insecure-temporary-file-handling-in-notarization  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-01. Updated: 2026-06-01  
License: CC BY 4.0 with a link back

CVE-2026-49135 · Severity: high · CVSS 7.1 · Published 2026-06-01

CodexBar is a tool used for managing AI providers and release workflows. A security flaw in its release process allowed local users on the same computer to steal sensitive App Store Connect API keys or interfere with software build files. This could lead to the theft of developer credentials or the unauthorized modification of software before it is submitted to Apple for notarization.

Technologies: [Steipete CodexBar](https://junglewise.ai/threats/technologies/codexbar). Vendors: [Steipete](https://junglewise.ai/threats/vendors/steipete).

## Quick answers

**Is CVE-2026-49135 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-49135 being exploited in the wild.

**How severe is CVE-2026-49135?** High severity, with a CVSS score of 7.1, published 1 June 2026.

**Which products and versions are affected?** Steipete CodexBar < 0.32.0.

**Is there a fix for CVE-2026-49135?** A patch was published on 2026-05-30: Fix merged in pull request 1228 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-49135 attacked?** It is attacked with local access, in a network appliance.

**Am I affected by CVE-2026-49135?** Check whether you run Steipete CodexBar at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A vulnerability exists in the `Scripts/sign-and-notarize.sh` script of CodexBar due to the use of predictable temporary file paths in the `/tmp` directory. Specifically, the script writes the `APP_STORE_CONNECT_API_KEY_P8` secret to a fixed path (`/tmp/codexbar-api-key.p8`) and stages notarization archives at a predictable location. A local attacker can exploit this by pre-creating symbolic links or monitoring the directory to capture the API key or redirect file writes. This allows for the theft of App Store Connect credentials and potential tampering with notarization archives before they are submitted to Apple. The issue is resolved in version 0.32.0 by using `mktemp -d` to create isolated, restricted-permission workspaces.

## Affected products

- steipete CodexBar < 0.32.0

## Timeline

- 2026-05-30: patched: Fix merged in pull request 1228
- 2026-05-31: advisory: Version 0.32.0 released
- 2026-06-01: disclosed: CVE published and NVD entry created

## References

- [https://github.com/steipete/CodexBar/commit/e7d932616508cee43ea9bcc63c269b14698de655](https://github.com/steipete/CodexBar/commit/e7d932616508cee43ea9bcc63c269b14698de655)
- [https://github.com/steipete/CodexBar/pull/1228](https://github.com/steipete/CodexBar/pull/1228)
- [https://github.com/steipete/CodexBar/releases/tag/v0.32.0](https://github.com/steipete/CodexBar/releases/tag/v0.32.0)
- [https://www.vulncheck.com/advisories/codexbar-insecure-temporary-file-handling-in-notarization-workflow](https://www.vulncheck.com/advisories/codexbar-insecure-temporary-file-handling-in-notarization-workflow)

## Related threats

- [CodexBar credential forwarding via cross-origin redirects](https://junglewise.ai/threats/cve-2026-49949-codexbar-credential-forwarding-via-cross-origin-redirects)
- [CodexBar privilege escalation in CLI installer](https://junglewise.ai/threats/cve-2026-49134-codexbar-privilege-escalation-in-cli-installer)
- [CodexBar session cookie leakage in Amp and Ollama providers](https://junglewise.ai/threats/cve-2026-43625-codexbar-session-cookie-leakage-in-amp-and-ollama-providers)