Warden Scheduled Scan Results
Run: 2026-08-10T06:40:41.308Z
Commit: e6ef59b
Summary
| Severity |
Count |
| High |
1 |
| Medium |
3 |
Findings
PL7-3LA Predictable temporary directory enables symlink attack (L12) · high
The temporary download path is constructed with a predictable PID suffix under /tmp, allowing a local attacker to redirect extraction into an arbitrary directory via a symlink race.
NBL-KWJ MCP transport leaks if listTools or request throws (L57-L81) · medium
If client.listTools or client.request rejects, the call to client.close() is skipped and the xcrun mcpbridge child process may remain alive until the parent exits.
T8B-BR9 bump_version crashes on tags with leading-zero version components (L47-L62) · medium
Bash arithmetic expansion treats leading zeros as octal, so parsed version components like 08 cause value too great for base errors and abort the script.
N98-3Q3 Session default paths can escape working directory via relative path traversal (L47) · medium
Relative paths containing ../ sequences are resolved with path.resolve without validation that the result stays within the working directory, allowing path escape despite the function's isolation intent.
Generated by Warden
Warden Scheduled Scan Results
Run: 2026-08-10T06:40:41.308Z
Commit:
e6ef59bSummary
Findings
scripts/bundle-axe.shPL7-3LAPredictable temporary directory enables symlink attack (L12) · highThe temporary download path is constructed with a predictable PID suffix under
/tmp, allowing a local attacker to redirect extraction into an arbitrary directory via a symlink race.scripts/probe-xcode-mcpbridge.tsNBL-KWJMCP transport leaks if listTools or request throws (L57-L81) · mediumIf
client.listToolsorclient.requestrejects, the call toclient.close()is skipped and thexcrun mcpbridgechild process may remain alive until the parent exits.scripts/release.shT8B-BR9bump_version crashes on tags with leading-zero version components (L47-L62) · mediumBash arithmetic expansion treats leading zeros as octal, so parsed version components like
08causevalue too great for baseerrors and abort the script.src/benchmarks/claude-ui/mcp-config.tsN98-3Q3Session default paths can escape working directory via relative path traversal (L47) · mediumRelative paths containing
../sequences are resolved withpath.resolvewithout validation that the result stays within the working directory, allowing path escape despite the function's isolation intent.Generated by Warden