Issues - neuron - Gitea: Git with a cup of tea

neuron-technologies/neuron

Labels Milestones New Issue

[P0][SECURITY] Unauthenticated LAN + unfenced /api/tools/file/write = remote arbitrary file write (escalates #110) blocks-public-beta P0 security

#128 opened 2026-08-07 03:13:35 +00:00 by tim.lingo

Non-Anthropic providers are broken end-to-end: launcher exports SOUL_LLM_BASE_URL, engine reads NEURON_LLM_0_URL — so use_openai is always false and a Groq key gets POSTed to api.anthropic.com (and that path has no tools anyway) BETA-CRITICAL P0 security

#112 opened 2026-08-06 03:26:41 +00:00 by tim.lingo

Crisis-path segfault ships in dist/soul.c: elc miscompiles let n: Int = pos + str_len(m) to el_str_concat (4 sites live) — fixed in .el by #109, production exposed until soul.c is regenerated BETA-CRITICAL P0

#111 opened 2026-08-06 03:25:29 +00:00 by tim.lingo

[P0][SECURITY] BUG-41: shipped brain binds ALL interfaces with no auth — the launcher's loopback-lock and auth key are inert (EL_HTTP_BIND_HOST / EL_HTTP_AUTH_KEY exist nowhere in the engine) BETA-CRITICAL blocks-public-beta P0 security

#110 opened 2026-08-06 03:24:24 +00:00 by tim.lingo