网安资讯详情 - SecLens 情报雷达

CVE-2026-64650 | Vercel harness-codex up to 1.0.28 Relay improper authorization

来源： vuldb · 发布时间 2026-07-21 05:49 (UTC+08:00) · 抓取时间 2026-07-21 06:01 (UTC+08:00)

原文链接

摘要

A vulnerability labeled as <a href="https://vuldb.com/kb/risk">critical</a> has been found in <a href="https://vuldb.com/product/vercel:harness-codex">Vercel harness-codex up to 1.0.28</a>. The affected element is an unknown function of the component <em>Relay</em>. Executing a manipulation can lead to improper authorization. This vulnerability is tracked as <a href="https://vuldb.com/cve/CVE-2026-64650">CVE-2026-64650</a>. The attack can be launched remotely. No exploit exists.

标签

• CVE-2026-64650

扩展字段

{
  "raw_pub_date": "Mon, 20 Jul 2026 23:49:17 +0200"
}