Narosec

An authorization flaw exists in the '/api/ai/approvals' endpoint. This issue allows authenticated users with viewer-level permissions to manage approval requests. An attacker can list pending requests to expose proposed commands and targets, as well as approve or deny requests made by other users, which alters the decision and audit state.

Missing authentication allows unauthenticated attackers to query the enrichment service via Next.js console rewrite routes. By sending requests to the endpoints '/api/v1/enrichment/lookup' or '/api/v1/enrichment/bulk', attackers can retrieve threat-intelligence results. Additionally, setting the `force` variable to true allows the consumption of commercial provider API quotas.

An issue allows authenticated remote callers to read files from the daemon host by opening file:// URLs. An attacker can send an open command with a file:// target through the '/rpc' endpoint and then issue a snapshot to read any plaintext file accessible by the daemon account.