Hacktoberfest 2026: le issue che i maintainer hanno segnato per ottobre, aperte e adatte ai principianti. Sfoglia le issue Hacktoberfest

:bug: eventing: unauthenticated PUT /transcript rewrites what an agent resumes from, and correlation ids are listable

Aperta
  • Qualcosa non va?
#887 0 commenti 0 reazioni 0 assegnatari Vedi su GitHub

I maintainer di solito rispondono entro 6 giorni

Nessuno ha ancora preso questa issue.

Valutazione

Difficoltà
4/5
Tempo stimato
3-5 giorni
Idoneità per principianti
42/100
Tipo di issue
Bug
Chiarezza
Abbastanza chiara
Stato di attività
Attiva
Stack tecnologico
python
Ambito
api, authentication, backend, security

Direzione di ricerca

Start in eventing/handlers.py and trace authentication for the transcript and group routes, then read eventrunner/transcript.py, eventrunner/runner.py, and store.py. Review the related paths in ghauth.py, skills/eventbridge/eventbridge-cli.py, main.py, and kafka_out.py, along with tests/test_ghauth.py; run the relevant tests and verify the exposed transcript, correlation-id, login, and signing behaviors are covered.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Descrizione

kind/bug

Summary

Sign-in guards only the two routes that start work. POST /v0/agents and POST /v0/groups call
auth.resolve; every other route is open. Two consequences are worth separating from the general
"only starting work is authenticated" limit, because together they let an unauthenticated caller
rewrite what an agent resumes from.

Found while documenting the controls for rossoctl/rossoctl#2609. References are to eventing/ at
d9677ddd.

1. PUT /v0/agents/{id}/transcript needs no credential, and feeds claude --resume

The transcript is the session checkpoint EventRunner resumes from. On a cold pod a mode=continue
turn downloads it from EventBridge and passes it to claude --resume
(eventrunner/transcript.py:181-196, eventrunner/runner.py:238,256,301).

PUT is unauthenticated, so anyone who can name a conversation can replace the history the agent
continues with. Request signing does not help: it covers the prompt, not the resume state.

Observed against Handlers with sign-in fully configured (client id and approved list):

PUT  without credential -> 200 OK
POST /v0/agents without credential -> 401 Unauthorized
GET  without credential -> 200 OK  b'{"type":"user","message":{"role":"user","content":"forged history"}}\n'

2. Correlation ids are listable without signing in

GET /v0/groups returns the 100 most recent groups (store.py:273, no query parameter raises it —
handlers.py:206), and GET /v0/groups/{id}/status lists every member's correlation id. Both are
open. So "an attacker would have to guess the id" understates the exposure for any conversation that
belongs to a group.

Confirmed: all_groups() returns 100 when 105 groups exist.

Related

  • ghauth._post_form raises HTTPError on any GitHub 4xx (ghauth.py:57), so the friendly message
    at :74-80 is unreachable and device_flow_disabled surfaces as a traceback ending in
    HTTP Error 400: Bad Request. cmd_login catches only RuntimeError
    (skills/eventbridge/eventbridge-cli.py:514-518). tests/test_ghauth.py:265-267 patches
    _post_form, so the test never sees the status. Reproduced by patching urlopen to raise a 400.
  • Startup does not check that EB_SIGNING_KID is present in EB_VERIFY_KEYSET_PATH
    (__main__.py:68 checks only that it is set), so EventBridge can start and then flag its own group
    events. Combined with the fact that group events are signed only when EB_SIGNING_KEY_PATH gives a
    seed (kafka_out.py:102), a half-configured deployment fails closed on genuine traffic.

Impact

All of the above are documented as limits in rossoctl/rossoctl#2609, so the docs are accurate. The
transcript write is the one I would prioritise: it is an unauthenticated write that changes agent
behaviour, rather than only a read or a notification artefact.

Lingua principale
Python
Stelle
11
Fork
42
Merge medio
4g 11h
PR unite (30g)
40

Preparare l'ambiente

Come iniziare

  1. Leggi tutta la issue e poi la guida ai contributi del progetto.
  2. Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
  3. Fai un fork del repository e lavora su un branch.
  4. Apri una pull request che faccia riferimento al numero della issue.

Altre issue di rossoctl/examples

Tutte le issue di rossoctl/examples

Issue simili

Altre issue su Python

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.