CVE-2026-49134 describes a privilege escalation vulnerability in the steipete CodexBar CLI installer versions before 0.32.0. The vulnerability arises from insecure temporary file handling where the installer creates a temporary file using mktemp, writes a privileged shell payload, and executes it with root privileges via bash. A race condition allows a local attacker running under the same user account to rewrite the installer body before the administrator prompt is approved, enabling execution of arbitrary commands as root.

Successful exploitation allows a local attacker with the same user privileges to escalate to root privileges by executing arbitrary commands. This compromises system integrity and security by granting full administrative control.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid running the vulnerable installer in environments where local users share privileges or have access. Monitor vendor channels for updates regarding a patch or official mitigation.