Timmy_Foundation/hermes-agent
15
0
Fork 0
Code Issues 191 Pull Requests 40 Actions 137 Packages Projects Releases Wiki Activity

[Security] Profile isolation - all profiles share one session DB #323

New Issue
Closed
opened 2026-04-13 02:58:21 +00:00 by Timmy · 3 comments
Timmy commented 2026-04-13 02:58:21 +00:00
Owner
Copy Link

Source: Empirical audit 2026-04-12

Finding: 15 profiles exist, 10 have state.db files, but ALL have zero sessions. Every session is in the shared main state.db. No data-level profile isolation.

Implications:

  • One profile agent can potentially access another profile data
  • No backup granularity per profile
  • No audit trail of which profile created which session

What to build: At minimum, tag sessions with their originating profile. Ideally implement per-profile session tables or per-profile message filtering.

**Source:** Empirical audit 2026-04-12 **Finding:** 15 profiles exist, 10 have state.db files, but ALL have zero sessions. Every session is in the shared main state.db. No data-level profile isolation. **Implications:** - One profile agent can potentially access another profile data - No backup granularity per profile - No audit trail of which profile created which session **What to build:** At minimum, tag sessions with their originating profile. Ideally implement per-profile session tables or per-profile message filtering.
Timmy added the security label 2026-04-13 02:58:21 +00:00
claude was assigned by Timmy 2026-04-13 03:08:39 +00:00
Rockachopa commented 2026-04-13 21:42:00 +00:00
Owner
Copy Link

🔥 BURN RE-DISPATCH — BURNONE pane 1

Fresh burn dispatch. Gitea-first workflow.

🔥 **BURN RE-DISPATCH** — BURNONE pane 1 Fresh burn dispatch. Gitea-first workflow.
Rockachopa commented 2026-04-13 22:43:52 +00:00
Owner
Copy Link

🔥 BURN — YOLOBURN.4 claimed from [claude]

🔥 **BURN** — YOLOBURN.4 claimed from [claude]
Rockachopa commented 2026-04-13 22:55:02 +00:00
Owner
Copy Link

PR #422: #422

Profile isolation via profile column on sessions table (schema v7). All query methods accept optional profile filter. Backward compatible.

PR #422: https://forge.alexanderwhitestone.com/Timmy_Foundation/hermes-agent/pulls/422 Profile isolation via `profile` column on `sessions` table (schema v7). All query methods accept optional `profile` filter. Backward compatible.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
CI
Continuous integration, runners, workflow issues
 QA
Quality assurance, testing, production audit
 assigned-claw-code
Queued for Code Claw (qwen/openrouter)
 assigned-kimi
Task assigned to KimiClaw for processing
 audit-finding
batch-pipeline
batch-pipeline label
 blocked
Blocked by external dependency or merge conflict
 bug
claw-code-done
Code Claw completed this task
 claw-code-in-progress
Code Claw is actively working
 critical
duplicate
Duplicate of another issue
 epic
Epic - large feature with multiple sub-tasks
 epic:memory
Unified Memory Architecture epic
 gaming
Gaming agent capabilities
 infra
Infrastructure, VPS, DNS, deployment
 kimi-done
KimiClaw has completed this task
 kimi-in-progress
KimiClaw is actively working on this
 mcp
MCP (Model Context Protocol) tools & servers
 morrowind
Morrowind Agent gameplay & MCP integration
 needs-review
PR or issue requires reviewer sign-off before merge/close
 ops
p0-critical
p1-important
phase:1-activate
Phase 1: Activate existing systems
 phase:2-operational
Phase 2: Operational memory bridge
 phase:3-episodic
Phase 3: Proactive episodic recall
 phase:4-hygiene
Phase 4: Memory hygiene and quality
 phase:5-integration
Phase 5: Integration and testing
 poka-yoke
research
security
Security hardening, vulnerability fixes
 shared-infra
Shared infrastructure across projects (Playground + LPM)
 stale
No activity, pending triage or closure
 throughput-10x
throughput-10x label
 token-masterplan
token-masterplan label
 tool-evaluation
velocity-engine
Auto-generated by velocity engine
 wont-fix
Closed as intentionally not fixing — explicit descope
No Label security
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
Rockachopa Timmy allegro antigravity bezalel claude claw-code codex-agent ezra gemini google grok hermes kimi manus perplexity sonnet
No Assignees claude
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Timmy_Foundation/hermes-agent#323
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?