azcomputerguru/guru-connect
1
0
Fork 0
Code Issues 13 Pull Requests Actions Packages Projects Releases 2 Wiki Activity
Labels Milestones New Issue
8 Open 2 Closed
Label
Clear labels
blocked
bug
component:agent
component:dashboard
component:guruconnect
component:harness
component:rmm-agent
component:rmm-dashboard
component:rmm-server
component:server
dropped
feature
fixed
in-progress
P1-critical
P2-high
P3-normal
P4-low
project
security
security
severity:critical
severity:high
skill
verified
wontfix
Milestone
No milestone
Open milestones
Active Sprint
Backlog
Projects
Clear projects
Assignee
Clear assignees
No assignee
azcomputerguru
[H8] cak_ store ACL set via bare icacls (PATH search) from SYSTEM -> LPE; silent weaker store on failure bug component:agent P2-high security severity:high
#22 opened 2026-06-05 17:35:59 -07:00 by azcomputerguru
1
[H7] Attended-consent MessageBoxW awaited inside agent main loop -> up to ~60s of no heartbeats/stop processing bug component:agent P2-high security severity:high
#21 opened 2026-06-05 17:35:54 -07:00 by azcomputerguru
1
[H6] Dashboard JWT in sessionStorage, blindly attached as Bearer, no exp/refresh/idle-timeout bug component:dashboard P2-high security severity:high
#20 opened 2026-06-05 17:35:49 -07:00 by azcomputerguru
1
[H5] Server does not block self-role-demotion (only self-delete); lockout guard is client-only bug component:dashboard component:server P2-high security severity:high
#19 opened 2026-06-05 17:35:45 -07:00 by azcomputerguru
1
[H4] token_blacklist cleanup_expired re-verifies every JWT signature; stores whole tokens in RAM bug component:server P2-high security severity:high
#18 opened 2026-06-05 17:35:38 -07:00 by azcomputerguru
1
[H3] revoke_user_tokens is a 501 stub whose comment claims partial behavior bug component:server P2-high security severity:high
#17 opened 2026-06-05 17:35:33 -07:00 by azcomputerguru
1
[H2] Bootstrap admin plaintext password written to .admin-credentials + info! log fallback bug component:server P2-high security severity:high
#16 opened 2026-06-05 17:35:28 -07:00 by azcomputerguru
1
SPEC-018 review: deferred hardening follow-ups (hot-path unwraps, panic-guard scope, nits) component:guruconnect P2-high security
#8 opened 2026-06-03 15:13:55 -07:00 by azcomputerguru
1