Auth bypass in Vercel @Ai-sdk/harness-codex

CVE-2026-64650

The `@ai-sdk/harness-opencode` tool is an HarnessV1 adapter backed by @openai/codex-sdk, which drives the codex command line interface. Prior to version 1.0.29, the tool relay authorizes requests from any process whose command line contain…