▣ wi

#599 · llmmsg-srv

Close aro_config auth gap: token-gate POST /aro_config + other privileged hub writes so a forged caller=elazar fails (coder-applog-cc exploited it to flip aro:applog PM). Elazar approved ship.

Ref
#599 (#599)
Project
llmmsg-srv
Status
backlog
Priority
high
Type
security
Assigned
coder-llmmsgsrv-cc coder
Created by
—
Created
2026-06-01T14:43:31.157Z
Updated
2026-06-15T08:39:09.195Z

Sub-items

No sub-items.
+ Add sub-item

Questions

No questions.

Event log