CVE-2026-43625 CodexBar < 0.32.0 Session Cookie Exposure via HTTP Redirect
Network attackers can intercept session cookies via cleartext HTTP redirects, potentially leading to account takeover in CodexBar.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-43625?
CVE-2026-43625 is a high-severity vulnerability in steipete CodexBar, published on 1 Jun 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
CodexBar prior to 0.32.0 contains a session cookie leakage vulnerability that allows network attackers to intercept imported browser session cookies by exploiting improper redirect handling for Amp and Ollama provider sessions. Attackers can position themselves on the network path to receive cleartext HTTP requests carrying imported session cookies when a provider-controlled redirect target issues a redirect to a cleartext HTTP endpoint within the same provider domain.
Weakness: CWE-319
Which versions are affected by CVE-2026-43625?
How do I fix CVE-2026-43625?
No fix has been published for CVE-2026-43625 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-43625 being exploited?
There is no known exploitation of CVE-2026-43625 in the wild and no public exploit code.
Sources
Also known as GHSA-x92v-hcjq-jcx7.