Skip to content
OpenAdvisories

Product · vercel

@ai-sdk/harness-codex

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-64650

    AI SDK Codex Harness Tool Relay Authorization Bypass

    The `@ai-sdk/harness-opencode` tool is an HarnessV1 adapter backed by @openai/codex-sdk, which drives the codex command line interface. Prior to version 1.0.29, the tool relay authorizes requests from any process whose command line contains an allowed helper …

    vercel @ai-sdk/harness-codex