SDK client metadata is silently rewritten on reconnect #63

New Issue

Skipper · 2026-04-05T16:23:07Z

Skipper commented

2026-04-05 16:23:07 +00:00

Info

Severity: MEDIUM
Attack vector: network-only

Impact

Allows an already approved SDK client to rewrite its displayed identity and mislead operators during later approval flows.

Description

On every successful SDK client authentication, the server overwrites the stored client name, description, and version with whatever metadata the peer provides. There is no user-agent confirmation or separate audit step for these identity changes.

Example flow

Authenticate as an already approved SDK client.
Reconnect with attacker-chosen metadata such as a misleading name or description.
Let the server overwrite the stored metadata automatically.
Rely on the forged metadata to mislead operators in later approval prompts.

Mitigation

Require explicit confirmation for metadata changes, record them in an audit trail, or separate mutable display metadata from security-relevant client identity.

# Info **Severity**: **MEDIUM** Attack vector: network-only ## Impact Allows an already approved SDK client to rewrite its displayed identity and mislead operators during later approval flows. ## Description On every successful SDK client authentication, the server overwrites the stored client name, description, and version with whatever metadata the peer provides. There is no user-agent confirmation or separate audit step for these identity changes. ## Example flow 1. Authenticate as an already approved SDK client. 2. Reconnect with attacker-chosen metadata such as a misleading name or description. 3. Let the server overwrite the stored metadata automatically. 4. Rely on the forged metadata to mislead operators in later approval prompts. ## Mitigation Require explicit confirmation for metadata changes, record them in an audit trail, or separate mutable display metadata from security-relevant client identity.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: MarketTakers/arbiter#63