Disposition: no remediation (logged).

• GitHub issue: 12
• Aikido group: 40056540
• Severity: high
• Type: sast
• Findings in group: 96
• Changelog hub: https://userig.app/changelog?hub=bugs

Labels

security, aikido, no-remediation, severity:high, type:sast, github-12

Forum tag limit is 5 — full label set listed above and on the matching GitHub issue.

Aikido findings

• 487719532 — apps/desktop/electron/mcp/agentGuidance.js:94 — severity 80 (high)
• 487719548 — apps/desktop/electron/mcp/linkers/cursor.js:16 — severity 80 (high)
• 487719566 — apps/desktop/electron/services/envDetect.js:12 — severity 80 (high)
• 487719579 — apps/desktop/electron/services/envWriter.js:16 — severity 80 (high)
• 487719581 — apps/desktop/electron/services/envWriter.js:27 — severity 80 (high)
• 487719582 — apps/desktop/electron/services/envWriter.js:21 — severity 80 (high)
• 487719589 — apps/desktop/electron/services/envWriter.js:51 — severity 80 (high)
• 487719691 — apps/desktop/electron/services/rigHandoff.js:10 — severity 80 (high)
• 487719693 — apps/desktop/electron/services/rigHandoff.js:18 — severity 80 (high)
• 487719694 — apps/desktop/electron/services/rigHandoff.js:71 — severity 80 (high)
• 487719706 — apps/desktop/electron/services/scaffolds.js:117 — severity 80 (high)
• 487719708 — apps/desktop/electron/services/scriptDetector.js:17 — severity 80 (high)
• 487719710 — apps/desktop/electron/services/scriptDetector.js:18 — severity 80 (high)
• 487719712 — apps/desktop/electron/services/scriptDetector.js:19 — severity 80 (high)
• 487719714 — apps/desktop/electron/services/scriptDetector.js:20 — severity 80 (high)
• 487719716 — apps/desktop/electron/services/scriptDetector.js:25 — severity 80 (high)
• 487719718 — apps/desktop/electron/services/scriptDetector.js:36 — severity 80 (high)
• 487719719 — apps/desktop/electron/services/scriptDetector.js:54 — severity 80 (high)
• 487719721 — apps/desktop/electron/services/scriptDetector.js:58 — severity 80 (high)
• 487719761 — apps/web/server.mjs:114 — severity 80 (high)
• 487719526 — apps/desktop/electron/mcp/agentGuidance.js:62 — severity 75 (high)
• 487719536 — apps/desktop/electron/mcp/linkers/codex.js:11 — severity 75 (high)
• 487719544 — apps/desktop/electron/mcp/linkers/common.js:12 — severity 75 (high)
• 487719550 — apps/desktop/electron/mcp/linkers/vscode.js:17 — severity 75 (high)
• 487719553 — apps/desktop/electron/mcp/linkers/windsurf.js:18 — severity 75 (high)
• 487719562 — apps/desktop/electron/services/backup.js:80 — severity 75 (high)
• 487719568 — apps/desktop/electron/services/envProfiles.js:8 — severity 75 (high)
• 487719569 — apps/desktop/electron/services/envProfiles.js:21 — severity 75 (high)
• 487719575 — apps/desktop/electron/services/envProfiles.js:71 — severity 75 (high)
• 487719591 — apps/desktop/electron/services/gitService.js:40 — severity 75 (high)
• 487719594 — apps/desktop/electron/services/lanes.js:296 — severity 75 (high)
• 487719698 — apps/desktop/electron/services/scaffolds.js:89 — severity 75 (high)
• 487719726 — apps/desktop/electron/services/scriptDetector.js:142 — severity 75 (high)
• 487719734 — apps/desktop/electron/services/setupAssist.js:158 — severity 75 (high)
• 487719519 — apps/desktop/electron/mcp/agentGuidance.js:51 — severity 70 (high)
• 487719528 — apps/desktop/electron/mcp/agentGuidance.js:76 — severity 70 (high)
• 487719530 — apps/desktop/electron/mcp/agentGuidance.js:88 — severity 70 (high)
• 487719534 — apps/desktop/electron/mcp/linkers/claude.js:20 — severity 70 (high)
• 487719538 — apps/desktop/electron/mcp/linkers/codex.js:49 — severity 70 (high)
• 487719547 — apps/desktop/electron/mcp/linkers/common.js:91 — severity 70 (high)
• …and 56 more (see GitHub issue / security log)

Tracked in the Rig security log. Posted by Rig for visibility on the Bugs board.