←All topics

disputed

1 piece of writing

vulnerability7 min read

nekro-agent shares one RPC secret with every sandbox: a disputed CWE-200 finding

nekro-agent injects a single global RPC_SECRET_KEY into every LLM sandbox container, letting any prompt-injected code impersonate other containers or forge cross-channel RPC calls. The maintainer closed the fix PR without merge. Here is why the vulnerability is real regardless.