Evidence · DiggingBeagle record
Agent Router encryption seed exposed in pod arguments
Advisory: MCP encryption seed remained in generated extproc container arguments after an earlier fix.
- Source role
- primary disclosure
Evidence record
Advisory: MCP encryption seed remained in generated extproc container arguments after an earlier fix.
Claim-level citations (2)
- supportsAgent Router MCP session seed remained visible in pod command arguments: The Agent Router seed advisory reports that gateway Pod read permissions, including the built-in view ClusterRole, could reveal the MCP session seed from generated container arguments, without access to Secret objects.
Where the seed can be read today; Impact
- supportsAgent Router MCP session seed remained visible in pod command arguments: The Agent Router 1.2.0 secret-handling repair still passed the MCP session encryption seed through generated extproc container arguments accessible to actors with Pod read permissions.
Summary; extproc sidecar receives seed as container argument