edgesecurityaccess-wireguard-vpn

Fail

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: HIGHCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFEPERSISTENCEDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Executes critical system commands for network setup, including iptables for NAT configuration, sysctl for enabling IP forwarding, and wg-quick for managing WireGuard interfaces.- [PRIVILEGE_ESCALATION]: Requires root access via sudo to install system-wide packages, modify protected directories in /etc/, and manage system services.- [REMOTE_CODE_EXECUTION]: Clones source code from a third-party GitHub repository (ara-so/edge-security-access) and executes the compiled binaries.- [EXTERNAL_DOWNLOADS]: Downloads the Go compiler from the trusted go.dev domain and the project source code from GitHub.- [CREDENTIALS_UNSAFE]: Explicitly manages and stores server private keys and user passwords in plaintext files (esa.conf and users.txt), exposing credentials to any user with read access to the config directory.- [PERSISTENCE]: Configures and enables a systemd unit (esa.service) to ensure the VPN server persists across system reboots.- [DYNAMIC_EXECUTION]: Automates the compilation of Go and C++ source code into executable binaries at runtime using go build and make.- [INDIRECT_PROMPT_INJECTION]: Processes user-provided authentication data (usernames/passwords) via CLI tools that write directly to system configuration files, creating a vulnerability surface for malformed input.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 16, 2026, 10:31 AM
Security Audit — agent-trust-hub — edgesecurityaccess-wireguard-vpn