Tracking issue — the underlying property lives upstream in nullislabs/nexum-runtime, which shepherd-engine depends on as a pinned git dependency.
Upstream issue: nullislabs/nexum-runtime#63
Found during an internal red-team review (malicious network attacker persona): the [capabilities.http].allow outbound allowlist matches on hostname only, before DNS resolution — there's no resolved-IP check to catch a domain rebound to an internal/metadata address after being allowlisted. Any shepherd module with an http capability grant is affected.
This issue tracks: deciding whether shepherd's threat model needs this hardened upstream, and re-verifying once nexum-runtime addresses it (if it does).
Tracking issue — the underlying property lives upstream in
nullislabs/nexum-runtime, whichshepherd-enginedepends on as a pinned git dependency.Upstream issue: nullislabs/nexum-runtime#63
Found during an internal red-team review (
malicious network attackerpersona): the[capabilities.http].allowoutbound allowlist matches on hostname only, before DNS resolution — there's no resolved-IP check to catch a domain rebound to an internal/metadata address after being allowlisted. Any shepherd module with anhttpcapability grant is affected.This issue tracks: deciding whether shepherd's threat model needs this hardened upstream, and re-verifying once nexum-runtime addresses it (if it does).