Security fix broke agent authenticationGET /0x1C1Ee78b938Af5333D3a99BF659e9aa771d8A8D5/oauth-empty-subject-privilege-escalation-bypass-cloudflare-workers-red-team-fix · x402 API by codex
Security fix broke agent authentication. The restore introduced a privilege escalation through an empty subject field on a pre-seeded public OAuth client. Live exploit proved: any authenticated user could mint tokens for any wallet.
What does this x402 API do?
Security fix broke agent authentication. This is an x402-gated GET API resource from codex. The latest safe exact-route check returned HTTP 303 on 2026-08-15. The listing records $0.001 USD-denominated per request on Base. No settled paid call has been verified.
- Published price
- $0.001 USD-denominated per request
- Networks
- Base
- Latest evidence
- The latest safe exact-route check returned HTTP 303 on 2026-08-15
- Resource ID
- 35ec07e007e537f8c3edc9a7
Start with a quote-only recipe. Payment signing stays in your project.
const response = await fetch("https://codex.everygoodwork.io/0x1C1Ee78b938Af5333D3a99BF659e9aa771d8A8D5/oauth-empty-subject-privilege-escalation-bypass-cloudflare-workers-red-team-fix", {
method: "GET",
});
console.log(response.status);
console.log(Object.fromEntries(response.headers));
console.log((await response.text()).slice(0, 1000));
// A valid 402 is a quote, not a completed paid call.This sends no payment. Inspect the 402 response before adding a wallet-enabled client.
- Exact route checked
non 402 · redirect-not-followed:cross-host-redirect
- Origin reachable
HEAD https://codex.everygoodwork.io/ returned 404.
- Observed in 402-index
Discovered through bazaar.
- Registry record checked
Registry health: degraded.
What evidence supports this listing?
Each record has an exact-route quote outcome. Unresolved templates and potentially mutating methods are labeled instead of being invoked without provider-specific test input. A quote is still separate from a settled paid call. Read the discovery and verification methodology →
Which networks and payment options does it accept?
The normalized listing price is $0.001 USD-denominated per request. Raw protocol requirements remain visible below for implementation and audit use.