aether-ai-agent 235794d9f6 fix(security): OC-09 credential theft via environment variable injection ...

Implement comprehensive environment variable sanitization before Docker
container creation to prevent credential theft via post-exploitation
environment access.

Security Impact:
- Blocks 39+ sensitive credential patterns (API keys, tokens, passwords)
- Prevents exfiltration of ANTHROPIC_API_KEY, OPENAI_API_KEY, etc.
- Fail-secure validation with audit logging

Changes:
- Add sanitize-env-vars.ts with blocklist/allowlist validation
- Integrate sanitization into docker.ts (lines 273-294)
- Add validateEnvVars() to security validation
- Comprehensive test suite (62 tests, 100% pass rate)

Test Results: 62/62 passing
Code Review: 9.5/10 approved
Severity: HIGH (CWE-200, CVSS 7.5)

Signed-off-by: Aether AI Agent <github@tryaether.ai>

2026-02-17 00:00:23 +01:00

..

acp

…

agents

fix(security): OC-09 credential theft via environment variable injection

2026-02-17 00:00:23 +01:00

auto-reply

fix: normalize paths to forward slashes for Windows RegExp compatibility

2026-02-17 00:00:20 +01:00

browser

fix(browser): track original port mapping for EADDRINUSE fallback

2026-02-16 23:59:59 +01:00

canvas-host

…

channels

fix(onboarding): keep wildcard allowFrom helper string-typed

2026-02-16 22:55:59 +00:00

cli

fix(cli): use standalone script for service restart after update (#17225)

2026-02-17 00:00:16 +01:00

commands

fix: add api-version query param for Azure verification

2026-02-17 00:00:08 +01:00

compat

…

config

config: align memory hybrid UI metadata with schema labels/help

2026-02-16 23:59:19 +01:00

cron

fix(cron): prevent spin loop when job completes within scheduled second (#17821)

2026-02-16 23:59:44 +01:00

daemon

fix(daemon): warn on token drift during restart (#18018)

2026-02-16 23:59:50 +01:00

discord

Fix Discord auto-thread attempting to thread in Forum/Media channels\n\nCreating threads on messages within Forum/Media channels is often redundant\nor invalid (as messages are already posts). This prevents API errors and spam.\n\nFix: Check channel type before attempting auto-thread creation.

2026-02-16 23:59:16 +01:00

docs

…

gateway

fix(gateway): preserve unbracketed IPv6 host headers

2026-02-17 00:00:03 +01:00

hooks

fix: session-memory hook finds previous session file after /new/reset

2026-02-17 00:00:08 +01:00

imessage

channels: migrate core channel account listing to factory

2026-02-16 23:53:19 +01:00

infra

fix: include OPENCLAW_SERVICE_VERSION in system presence version detection

2026-02-16 23:56:10 +01:00

line

refactor(channels): dedupe transport and gateway test scaffolds

2026-02-16 14:59:31 +00:00

link-understanding

…

linq

feat(linq): add read receipts, typing indicators, and User-Agent header

2026-02-16 23:52:56 +01:00

logging

feat: add stuck loop detection and exponential backoff infrastructure for agent polling (#17118)

2026-02-16 15:16:35 -05:00

macos

…

markdown

test: remove duplicate hr spacing assertion

2026-02-16 06:16:33 +00:00

media

fix(media): clean expired files in subdirectories

2026-02-16 23:50:56 +01:00

media-understanding

fix: support OAuth for Gemini media understanding

2026-02-16 23:53:21 +01:00

memory

Memory: fix MMR tie-break and temporal timestamp dedupe

2026-02-16 23:59:19 +01:00

node-host

…

pairing

refactor(core): dedupe tool policy and IPv4 matcher logic

2026-02-16 16:14:54 +00:00

plugin-sdk

channels: add createAccountListHelpers factory

2026-02-16 23:53:19 +01:00

plugins

feat: add before_message_write plugin hook

2026-02-16 23:58:12 +01:00

process

fix(process): disable detached spawn on Windows to fix empty exec output (#18035)

2026-02-16 23:59:53 +01:00

providers

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

routing

Fix Discord session routing continuity (enable lastRoute for groups)\n\nPreviously, 'updateLastRoute' was only enabled for Direct Messages.\nThis meant that group/channel sessions did not update their routing\nmetadata (last channel/to/accountId) in 'session-meta.json'.\n\nIf the bot restarted or a proactive cron job tried to send a message\nto a group session using 'sessions_send' without an explicit 'to' field,\nit would fail because 'lastRoute' was missing or stale.\n\nFix: Enable 'updateLastRoute' for all Discord messages (Group + DM),\nensuring the session store always has the latest valid routing target.

2026-02-16 23:59:16 +01:00

scripts

…

security

refactor(core): dedupe tool policy and IPv4 matcher logic

2026-02-16 16:14:54 +00:00

sessions

…

shared

refactor(core): dedupe shared config and runtime helpers

2026-02-16 14:59:30 +00:00

signal

channels: migrate core channel account listing to factory

2026-02-16 23:53:19 +01:00

slack

fix(slack): extract text and media from forwarded message attachments

2026-02-16 23:55:34 +01:00

telegram

feat(telegram): receive and surface user message reactions (#10075)

2026-02-16 23:59:36 +01:00

terminal

…

test-helpers

…

test-utils

refactor(core): dedupe shared config and runtime helpers

2026-02-16 14:59:30 +00:00

tts

refactor(channels): dedupe transport and gateway test scaffolds

2026-02-16 14:59:31 +00:00

tui

refactor(tests): share harnesses for cli and monitor fixtures

2026-02-16 17:06:40 +00:00

types

…

utils

…

web

fix(whatsapp): allow per-message link preview override\n\nWhatsApp messages default to enabling link previews for URLs. This adds\nsupport for overriding this behavior per-message via the \nparameter (e.g. from tool options), consistent with Telegram.\n\nFix: Updated internal WhatsApp Web API layers to pass option\ndown to Baileys .

2026-02-16 23:57:09 +01:00

whatsapp

…

wizard

Onboarding: fix webchat URL loopback and canonical session

2026-02-16 23:52:00 +01:00

channel-web.ts

…

docker-setup.test.ts

…

entry.ts

…

extensionAPI.ts

…

globals.ts

…

index.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

refactor(core): extract shared runtime and wizard schemas

2026-02-16 17:06:40 +00:00

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…