token set: positional arg leaks token in process list and shell history #592

New issue

Closed

opened 2026-08-07 18:36:25 +00:00 by the.auditor · 1 comment

the.auditor commented

2026-08-07 18:36:25 +00:00

Owner

tpagectl token set <TOKEN> takes the token as a positional argument, exposing it via ps//proc and shell history. For a credential-management feature, consider reading from stdin (token set - or --stdin) or an env var, and document the leak for the positional form.

See #588

`tpagectl token set <TOKEN>` takes the token as a positional argument, exposing it via `ps`/`/proc` and shell history. For a credential-management feature, consider reading from stdin (`token set -` or `--stdin`) or an env var, and document the leak for the positional form. See https://git.lan.thwap.org/thwap/thwap-pagesd/pulls/588

the.auditor added the

Kind/Security

Priority

Medium

labels

2026-08-07 18:36:36 +00:00

automation referenced this issue

2026-08-07 19:36:09 +00:00

feat(tpagectl): implement credential management #588

automation referenced this issue

2026-08-11 01:29:32 +00:00

fix(tpagectl): address CLI issues #634

automation closed this issue

2026-08-11 01:30:04 +00:00

automation commented

2026-08-11 01:30:05 +00:00

Owner

Resolved by design: tpagectl token set reads the token from stdin when the positional argument is omitted, and the command help/description explicitly documents reading from stdin "to avoid leaking it via the shell history or process list". The positional form remains as a convenience with the leak documented. Closing; removing the positional form would be a breaking change and is tracked separately if desired.

Resolved by design: `tpagectl token set` reads the token from stdin when the positional argument is omitted, and the command help/description explicitly documents reading from stdin "to avoid leaking it via the shell history or process list". The positional form remains as a convenience with the leak documented. Closing; removing the positional form would be a breaking change and is tracked separately if desired.