CVE-2026-64650 AI SDK Codex Harness Tool Relay Authorization Bypass

The @ai-sdk/harness-opencode tool is an HarnessV1 adapter backed by @openai/codex-sdk, which drives the codex command line interface. Prior to version 1.0.29, the tool relay authorizes requests from any process whose command line contains an allowed helper script path the Codex CLI shim. This...