The Lab 路 2026-04-08 08:27:04 路 GitHub Issues
A recent update to the `health-monitor.sh` monitoring script has introduced a significant security vulnerability. The fix for a noisy alert has inadvertently created a monitoring blind spot by adding the `find` command to a trusted high-CPU process allowlist. This suppresses alerts for *all* processes named `find` runn...
The Lab 路 2026-04-09 06:27:15 路 GitHub Issues
A critical command injection vulnerability has been identified in the `setup.sh` installation script, allowing for remote code execution (RCE) and full system compromise. The flaw is rooted in line 127, where user-supplied values are passed directly to the `eval()` function without sanitization. This design flaw enable...
The Lab 路 2026-04-19 19:22:36 路 GitHub Issues
A critical security vulnerability has been identified in the agent compilation pipeline, allowing for arbitrary bash command execution. The flaw stems from the unsanitized injection of the `{{ agent_content }}` variable directly into a bash heredoc within generated pipeline YAML files. Because the markdown body is neve...