Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

lightninglabs/lightning-terminal

              master @ 8c3b111
            

Fixes

CVEs

HIGH

Peak severity

66.7%

Coverage

Highlights

Auth Bypass: 16 prior fixes. Scrutinize any change in this area.

rpc_proxy.go: most-fixed (7 issues). Treat as high-risk during review.

20 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Multiple fixes in the proxy layer close gaps in macaroon validation, whitelist handling, and subsystem readiness checks. The recurring pattern is that certain RPC methods (e.g., BakeSuperMacaroon, litrpc calls, LiT session RPC) were reachable without proper authorization.

Auth Bypass: Session creation and linking had multiple bypasses: linking to non-existent accounts, using sessions before full creation, and creating linked sessions while previous ones were active. These flaws could allow unauthorized access through crafted session states.

Privacy Bypass: The privacy mapper had fail-open behavior for both unary and streaming RPCs to non-LND sub-daemons, potentially leaking sensitive data. Fixes added fail-close interceptors and config obfuscation.