edgesecurityaccess-wireguard-vpn
Fail
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: HIGHCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFEPERSISTENCEDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes critical system commands for network setup, including
iptablesfor NAT configuration,sysctlfor enabling IP forwarding, andwg-quickfor managing WireGuard interfaces.- [PRIVILEGE_ESCALATION]: Requires root access viasudoto install system-wide packages, modify protected directories in/etc/, and manage system services.- [REMOTE_CODE_EXECUTION]: Clones source code from a third-party GitHub repository (ara-so/edge-security-access) and executes the compiled binaries.- [EXTERNAL_DOWNLOADS]: Downloads the Go compiler from the trustedgo.devdomain and the project source code from GitHub.- [CREDENTIALS_UNSAFE]: Explicitly manages and stores server private keys and user passwords in plaintext files (esa.confandusers.txt), exposing credentials to any user with read access to the config directory.- [PERSISTENCE]: Configures and enables asystemdunit (esa.service) to ensure the VPN server persists across system reboots.- [DYNAMIC_EXECUTION]: Automates the compilation of Go and C++ source code into executable binaries at runtime usinggo buildandmake.- [INDIRECT_PROMPT_INJECTION]: Processes user-provided authentication data (usernames/passwords) via CLI tools that write directly to system configuration files, creating a vulnerability surface for malformed input.
Recommendations
- AI detected serious security threats
Audit Metadata