Issues

• [Bug]: git_operations stats and canonicalizes gitdir:, commondir, alternates and config paths before authorizing them; on Windows a UNC pointer makes the daemon authenticate to a remote server

  bugdomain:securitysecuritytool
  zeroclaw-labs/zeroclaw#12127 · Filter by author IftekharUddin opened on Oct 30, 2026

• [Bug]: outbound attachment markers canonicalize the model's path before the workspace check; on Windows a UNC target makes the daemon authenticate to an attacker's SMB or WebDAV server

  bugchannel:corechanneldomain:securitysecurity
  zeroclaw-labs/zeroclaw#12126 · Filter by author IftekharUddin opened on Oct 30, 2026

• [Task]: release a signed-in chat socket's session watch while a send to it is stalled

  zeroclaw-labs/zeroclaw#12125 · Filter by author JordanTheJet opened on Oct 30, 2026

• [Bug]: Windows default forbidden_paths miss the Windows homes of the secrets the Unix defaults protect (%APPDATA%\gnupg, GitHub CLI, DPAPI, browser profiles) and hard-code C:\ system paths

  bugconfigdomain:securitysecurity:policysecuritytool:file
  zeroclaw-labs/zeroclaw#12124 · Filter by author IftekharUddin opened on Oct 30, 2026

• [Bug]: the local RPC named pipe keeps Windows' default DACL (Everyone and Anonymous may open it for read), not the "spirit of 0o600" the code claims, so any local account can hold its connection slots

  bugdaemondomain:securityruntimesecuritytopic:identity-access
  zeroclaw-labs/zeroclaw#12123 · Filter by author IftekharUddin opened on Oct 30, 2026

• [Bug]: the Windows prebuilt installers (setup.bat --prebuilt and the documented PowerShell block) skip the SHA256SUMS verification that install.sh and zeroclaw update perform

  bugdocsdomain:securityscriptssecurity
  zeroclaw-labs/zeroclaw#12122 · Filter by author IftekharUddin opened on Oct 30, 2026

• [Bug]: setup.bat persists the merged process PATH with setx, duplicating the machine PATH into the user PATH and cropping it at 1024 characters

  bugscripts
  zeroclaw-labs/zeroclaw#12121 · Filter by author IftekharUddin opened on Oct 30, 2026

• [Bug]: Windows daemon state depends on inherited directory ACLs: TLS keys, the relay signing key, OAuth login state, the gateway admin token and SQLite stores are created without a private DACL

  bugconfigdomain:securityruntimesecurity:secretssecuritytopic:identity-access
  zeroclaw-labs/zeroclaw#12120 · Filter by author IftekharUddin opened on Oct 30, 2026

• [Bug]: shell, skill and coding-CLI timeouts on Windows terminate only the interpreter; descendant processes keep running

  bugdomain:securityruntimesecuritytool:shell
  zeroclaw-labs/zeroclaw#12119 · Filter by author IftekharUddin opened on Oct 30, 2026

• [Bug]: cmd.exe shell dialect resolves bare commands from the workspace first, so a workspace-written git.bat runs as the allowlisted git

  bugconfigdomain:securityruntimesecurity:policysecuritytool:shell
  zeroclaw-labs/zeroclaw#12118 · Filter by author IftekharUddin opened on Oct 30, 2026

• [Feature]: Multiple plugin repository

  enhancement
  zeroclaw-labs/zeroclaw#12109 · Filter by author seungjin opened on Oct 30, 2026

• [Task]: tell other dashboard tabs about a full-page sign-in

  gatewayweb
  zeroclaw-labs/zeroclaw#12108 · Filter by author JordanTheJet opened on Oct 29, 2026

• [Task]: show a detached chat turn's answer when the socket reopens before the turn ends

  web
  zeroclaw-labs/zeroclaw#12107 · Filter by author JordanTheJet opened on Oct 29, 2026

• [Task]: ignore a dashboard session check that finishes after sign-out

  securityweb
  zeroclaw-labs/zeroclaw#12106 · Filter by author JordanTheJet opened on Oct 29, 2026

• [Bug]: OpenAI Responses drops tool-result image attachments

  zeroclaw-labs/zeroclaw#12104 · Filter by author vrurg opened on Oct 29, 2026

• [Feature]: "Log in with ChatGPT" (OAuth) option in dashboard Model Providers UI

  zeroclaw-labs/zeroclaw#12103 · Filter by author Mikkelka opened on Oct 29, 2026

• [Task]: send ask_user, poll and escalate messages with inline attachments off

  zeroclaw-labs/zeroclaw#12099 · Filter by author mov-xound-glitch opened on Oct 29, 2026

• [Task]: keep the SOP approval verbs and the exit-code health check off the gateway address in builds without the gateway

  cli
  zeroclaw-labs/zeroclaw#12097 · Filter by author JordanTheJet opened on Oct 29, 2026

• [Task]: keep dashboard sign-ins when the identity provider can't be reached at re-verification

  gatewayruntimesecurity
  zeroclaw-labs/zeroclaw#12096 · Filter by author JordanTheJet opened on Oct 29, 2026

• [Task]: resolve Agent route selections through the capability source

  runtime
  zeroclaw-labs/zeroclaw#12092 · Filter by author JordanTheJet opened on Oct 29, 2026

• [Task]: make the CLI's gateway admin commands honour [gateway.tls]

  cligateway
  zeroclaw-labs/zeroclaw#12091 · Filter by author JordanTheJet opened on Oct 29, 2026

• [Task]: wipe the raw token-endpoint response in the OIDC enrollment client

  runtimesecurity
  zeroclaw-labs/zeroclaw#12090 · Filter by author JordanTheJet opened on Oct 29, 2026

• [Task]: make dashboard sign-in work with introspection revalidation_secs = 0, or refuse it at config time

  gatewaysecurity
  zeroclaw-labs/zeroclaw#12089 · Filter by author JordanTheJet opened on Oct 29, 2026

• [Task]: harden dashboard sign-in cookies where the __Host- prefix can't apply

  gatewaysecurity
  zeroclaw-labs/zeroclaw#12088 · Filter by author JordanTheJet opened on Oct 29, 2026

• [Bug]: Tool enable/disable buttons auto-save while at the same time enabling save button

  bug
  zeroclaw-labs/zeroclaw#12087 · Filter by author andersea opened on Oct 29, 2026