{"repo":"NousResearch/hermes-agent","public_id":"121932","display_label":"RPC token exposure and kernel dir permissions","summary":"These issues and PRs concern sensitive RPC token data appearing in process arguments or session snapshots, and kernel/RPC directories being accessible to other users on shared systems. The work focuses on restricting directory permissions and removing the token from remote argv.","subsystem":null,"counts":{"members":4,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":1,"attempt_prs":2},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":124262,"merged_at":"2026-09-26T19:26:32+00:00"},"resolution":{"state":"resolved","by":"pr-124262"},"freshness":{"state":"verified","last_verified_at":"2026-09-26T19:26:32+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[{"issue_number":121932,"pr_number":124262,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-26T19:26:32+00:00"}],"members":[{"kind":"issue","number":121932,"title":"Remote execute_code drops the RPC token and tool data in world/group-accessible paths on shared backends","url":null,"state":"closed"},{"kind":"pr","number":121936,"title":"fix(code-execution): lock down remote kernel/RPC dirs, keep RPC token out of argv","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"7eed2de96b","number":0},{"kind":"pr","value":"#124262","number":124262}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":122440,"title":"fix(code-execution): keep the RPC token out of remote argv and the session snapshot","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"bbc8a7d6667841ab696d1f47db6edf12b1f40ea6","number":0},{"kind":"pr","value":"#122072","number":122072},{"kind":"pr","value":"#122073","number":122073}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":124262,"title":"fix(code-execution): keep the RPC token out of remote argv and lock down kernel dirs","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["tests/tools/_child_env_fixtures.py","tests/tools/test_code_execution.py","tests/tools/test_code_execution_file_rpc.py","tests/tools/test_code_kernel_remote.py","tests/tools/test_tool_result_storage.py","tools/code_execution_rpc.py","tools/code_execution_tool.py","tools/code_kernel_remote.py","tools/environments/base_session_env.py","tools/tool_result_storage.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}