A vulnerability labeled as critical has been found in Vercel harness-codex up to 1.0.28. The affected element is an unknown function of the component Relay. Executing a manipulation can lead to improper authorization.

This vulnerability is tracked as CVE-2026-64650. The attack can be launched remotely. No exploit exists.