T03 · Remote Payload Retrieval and Execution
Error
- Location
prompt.md:564- Finding
Mutable Remote Installer Is Downloaded and Executed with Root Privileges
- Content
View full analysis
/root/goglobal-3xui-install.log 2>&1 & ``` ### Technical Analysis The Skill instructs the user to invoke the KiwiVM `basicShell/exec` endpoint, which runs a shell command on the VPS with administrative privileges. That command retrieves `install.sh` from the mutable `master` branch of an external GitHub repository and immediately passes its contents to Bash. No immutable commit, release artifact, checksum, or cryptographic signature is specified. Consequently, the code executed on the VPS can differ from the code that existed when this Skill was audited. Compromise of the upstream repository, maintainer account, branch, or content-delivery path would turn this workflow into arbitrary root-level remote code execution. Running the installation in the background with `nohup` does not mitigate this issue. It instead makes the retrieved payload continue executing after the API request returns. ### Attack Path 1. The user provides a KiwiVM API key to the agent. 2. The agent generates a `basicShell/exec` URL containing the key and the remote installation command. 3. The user opens the generated URL. 4. KiwiVM executes the command on the VPS with administrative privileges. 5. The V ...[truncated 813 chars]- Remediation
View remediation