T03 · Remote Payload Retrieval and Execution
Error
- Location
references/notifications.md:111- Finding
Mutable Remote Watcher Is Downloaded and Persistently Executed Without Integrity Verification
- Content
View full analysis
> /tmp/ast-watcher.log 2>&1 ``` The remote download is also documented at `references/api-reference.md:1007-1013`: ```bash ### GET /api/watcher.sh Download the automated watcher script (no auth required). curl -sf https://agenticstreet.ai/api/watcher.sh -o ast-watcher.sh ``` ### Technical Analysis The installation instructions retrieve an executable shell script from a mutable service endpoint, make it executable, and instruct the user to run it every minute through cron. The downloaded artifact is not tied to a release version, repository commit, checksum, signature, or other immutable identity. The bundled `scripts/ast-watcher.sh` was inspected and did not contain an embedded malicious payload. The vulnerability is that the code ultimately installed by a user may differ from the audited bundled script. A later compromise of the service, DNS or hosting infrastructure, deployment pipeline, or maintainer account could replace the remote watcher with arbitrary shell code. Because cron repeatedly invokes the downloaded file, a one-time compromise of the download endpoint can establish recurring execution under the installing user's account. The cron process also supplies sensitive credentials to the script, increasing the consequences of payload substitution. # ...[truncated 1489 chars]- Remediation
View remediation