openclawd/config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

BUG-071: security incident response — key rotated, support agent hardened

Browse source
This commit is contained in:
Hoid 2026-02-17 21:53:54 +00:00
parent 3e37a420f6
commit a176f7bc56
2 changed files with 26 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

12
projects/business/memory/sessions.md
View file

@ -1213,3 +1213,15 @@
- **Budget:** €181.71 remaining, Revenue: €9
- **Open bugs:** ZERO — 0 CRITICAL, 0 HIGH, 0 MEDIUM, 0 LOW
- **Status:** LAUNCH-READY — zero bugs, all checklist items TRUE
## Session 49b — 2026-02-17 21:49 UTC (CRITICAL SECURITY INCIDENT)
- **Incident:** Support agent (Franz Hubert) leaked API key `df_free_87aa...100d` in plaintext via email
- Ticket #370: office@cloonar.com claimed to be dominik.polakovics@cloonar.com
- Agent retrieved key from DB and sent to office@cloonar.com (different email = social engineering attack)
- **Immediate response:**
- ROTATED compromised key — old key invalidated in DB, new key generated
- Container restarted to reload key cache
- Health verified OK
- **TODO:** Notify actual key owner (dominik.polakovics@cloonar.com) about compromise
- **TODO:** Update support agent prompt with hard security rules
- **TODO:** Security audit of support agent capabilities