MediumVulnerability
GHSA-xq7h-vwjp-5vrh: @grackle-ai/powerline Runs Without Authentication by Default
- Identifier
- GHSA-xq7h-vwjp-5vrh
- Published
- Record updated
- Affected
- @grackle-ai/powerline <= 0.70.0
- Fixed in
- 0.70.1
- released March 22, 2026, 3 days before disclosure
Summary
The PowerLine gRPC server in @grackle-ai/powerline runs with no authentication when neither the --token flag nor the GRACKLE_POWERLINE_TOKEN variable is set. It only logs a warning, and any client that can reach the port can spawn agent sessions, access credential tokens and execute code. The default binding to 127.0.0.1 limits exposure, but accidental network exposure, such as in a container or through port forwarding, makes the impact critical.
Mitigation
Fixed in 0.70.1: PowerLine now requires an explicit --no-auth flag to run without authentication, and throws an error when started without a token and without --no-auth. Workaround: always provide --token or set GRACKLE_POWERLINE_TOKEN when starting PowerLine.
Related items
- MediumRecent AI agent experiments reveal a risky future of machine 'teamwork' inside corporationsSimilar attack · CNBC Technology
- MediumClaude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHubSimilar attack · The Hacker News
- MediumCVE-2026-118046: JS Help Desk plugin stored DOM-based cross-site scripting via jsticket_messageSimilar attack · NVD/CVE Database
- MediumARTEX abuse expands as cybercriminals target financial sectorSimilar attack · Microsoft Security Blog
- MediumCVE-2026-102610: fast-agent serve unauthenticated remote command execution via /mcp endpointSimilar attack · NVD/CVE Database