T05 · Unauthorized Access and Privilege Escalation
Error
- Location
references/semantic-search.md:9- Finding
Read-only security claim conflicts with documented write and administrative operations
- Content
View full analysis
Read-only Elasticsearch 9.x reference for AI-orchestrated search and analytics. SECURITY: This skill provides documentation for read-only operations only (search, aggregations, analytics). No write/update/delete operations are included. ``` It recommends a narrowly scoped API key: ```markdown - Scope API keys to specific indices and minimal privileges - For read-only OpenClaw access: `privileges: ["read", "view_index_metadata"]` ``` ```json POST /_security/api_key { "name": "openclaw-readonly", "role_descriptors": { "reader": { "indices": [{ "names": ["my-index"], "privileges": ["read"] }] } } } ``` However, the referenced setup instructions create an index and index a document: ```json PUT my-index { "mappings": { "properties": { "title": { "type": "text" }, "content": { "type": "text" }, "semantic_content": { "type": "semantic_text", "inference_id": "my-inference-endpoint" } } } } ``` ```json POST my-index/_doc { "title": "Fresh Broccoli", "content": "Nutritious green broccoli, rich in vitamins.", "semantic_content": "Fresh Broccoli Nutritious green broccoli, rich in vitamins. vegetables" } ``` They also create an inference endpoint containing an external-service credential: ```json PUT _inference/text_embedding/jina-embeddings-v3 { "service": "jinaai", "service_settings": { "api_key": "jina_xxxxxx", "model_id": "jina-embeddings-v3" } } ``` The vector-search reference creates another index, installs an ingest pipeline, and indexes a document through that pipeline ...[truncated 3835 chars]- Remediation
View remediation