Issues · TinyAGI/tinyagi · GitHub

Labels Milestones

[Security] TinyAGI unauthenticated control-plane routes allow system prompt overwrite and daemon restart

#294

· YLChen-007 opened

on Jul 7, 2026

[Security] TinyAGI unauthenticated agent ID path traversal escapes the configured workspace root

#293

· YLChen-007 opened

on Jul 7, 2026

[Security] TinyAGI unauthenticated administrative API allows persistent settings and agent prompt modification

#292

· YLChen-007 opened

on Jul 7, 2026

[Security] TinyAGI Anthropic Adapter Disables Claude Dangerous-Tool Confirmation for Unauthenticated `POST /api/message` Requests

#291

· YLChen-007 opened

on Jul 7, 2026

[Security] TinyAGI Terminal Escape Injection via `POST /api/message` Allows Operator Log Spoofing

#290

· YLChen-007 opened

on Jul 7, 2026

[Security] TinyAGI allows unauthenticated API callers to exfiltrate arbitrary local files via outbound channel attachments

#289

· YLChen-007 opened

on Jul 7, 2026

[Security] TinyAGI exposes an unauthenticated local control plane that leaks live events and allows persistent settings modification

#288

· YLChen-007 opened

on Jul 7, 2026

[Security] Unauthenticated Pairing Management API Allows Arbitrary Approval of Pending Channel Senders

#287

· YLChen-007 opened

on Jul 7, 2026

[Security] TinyAGI Unauthenticated Local Control API Allows Persistent Settings Mutation, Agent Prompt Overwrite, and Event Stream Access

#286

· YLChen-007 opened

on Jul 7, 2026

[Security] Unauthenticated `prompt_file` update allows arbitrary local file read into provider-bound prompts

#285

· YLChen-007 opened

on Jun 20, 2026

[Security] Unauthenticated `prompt_file` agent configuration allows arbitrary local file disclosure to the model provider

#283

· YLChen-007 opened

on Jun 18, 2026

[Security] TinyAGI allows unauthenticated API messages to invoke Claude with provider permission checks disabled by default

#284

· YLChen-007 opened

on Jun 18, 2026