cmux

v0.64.9 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 12d CLI & Terminal

✓ No known CVEs patched

This release patches 1 known CVE

Topics

amp claude-code codex gemini ghostty opencode

+2 more

cli tmux

Affected surfaces

rce_ssrf

ReleasePort's take

Light signal

editorial:auto 12d

Version v0.64.9 of cmux fixes a Git repository search root traversal vulnerability and adds new keyboard shortcuts.

Why it matters: Patch to v0.64.9 immediately if your environment uses Git repository search; the fix addresses a critical traversal issue.

AI summary

Fixed Git repository search root traversal vulnerability.

Type	Severity	Summary	CVE
Feature	Medium	Introduces cmux-manager codex goal control prototype. Introduces cmux-manager codex goal control prototype. Source: llm_adapter@2026-05-22 Confidence: low	—
Feature	Medium	Adds cmux keyboard shortcuts skill. Adds cmux keyboard shortcuts skill. Source: llm_adapter@2026-05-22 Confidence: low	—
Bugfix	Medium	Fixes Git repository search root traversal issue. Fixes Git repository search root traversal issue. Source: llm_adapter@2026-05-22 Confidence: low	—
Other
Other	Medium	Releases version v0.64.9. Releases version v0.64.9. Source: llm_adapter@2026-05-22 Confidence: low	—
Other	Medium	Reverts codex goal control prototype moving to cmuxterm-hq. Reverts codex goal control prototype moving to cmuxterm-hq. Source: llm_adapter@2026-05-22 Confidence: low	—
Other	Medium	Reverts browser WebView refresh fix on workspace hide. Reverts browser WebView refresh fix on workspace hide. Source: llm_adapter@2026-05-22 Confidence: low	—

Full changelog

feat: cmux-manager codex goal control prototype by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/4505
Revert: codex goal control prototype (moving to cmuxterm-hq) by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/4522
Add cmux keyboard shortcuts skill by @lawrencecchen in https://github.com/manaflow-ai/cmux/pull/4434
Revert "Fix browser WebView refresh on workspace hide" by @austinywang in https://github.com/manaflow-ai/cmux/pull/4545
Fix Git repository search root traversal by @austinywang in https://github.com/manaflow-ai/cmux/pull/4557
Release v0.64.9 by @austinywang in https://github.com/manaflow-ai/cmux/pull/4561

Full Changelog: https://github.com/manaflow-ai/cmux/compare/v0.64.8...v0.64.9

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track cmux

Get notified when new releases ship.

About cmux

Ghostty-based macOS terminal with vertical tabs and notifications for AI coding agents