Repository Issue Activity (beta)

#599 Security issue found — requesting a private channel (per SECURITY.md)

#598 DCSync succeeds but doesn't dump credentials when combined with S4U abuse

#595 routing envelope encryption and encoding for communication profiles?

#567 Error: Can't contact apollo

#585 Rename payload file name doesn't refresh list of payloads.

#586 Subtasking TaskStatus not updating

#587 External POSTGRES_HOST causes Docker Compose error: depends on undefined service "mythic_postgres"

#590 Hardcoded sslmode=disable in database.getNewDbConnection prevents connecting to external PostgreSQL instances enforcing TLS

#584 Install/transport trust: CLI compose-field override (supply-chain) + gRPC self-asserted container name

#583 Web-tier issues: read-scope-write, tag XSS, unauthenticated recon + operator lockout, bulk-download zip-slip

#582 Deactivating or deleting an operator does not revoke their session (token keeps working and refreshes)

#581 Agent-triggerable denial of service: a single message / short flood crashes the whole server (all operations)

#380 feature request: podman and Nix flake support

#580 Cross-operation handlers on the agent-message / callback-graph bus + `["*"]` scope default

#572 mythic-cli start error: "mythic_server: No such file or directory"

#495 Translator Container does not receive CryptoKeys.Location field

#492 Agent Response Processing Blocked by Bad Response

#579 Empty-scope (`Scopes:[]`) sync/storage channels: unauthenticated container→server, including operator JS execution

#578 Eventing subsystem not covered by the auth rework: cross-operation execution + operator→lead privilege escalation

#577 Adding crypto shim

#568 Process Browser undo filter

#498 Hardcoded rabbitmq vhost

#565 Spectator role bypass -- EventingImportAutomaticWebhook allows spectators to create and delete automation workflows

#564 Cross-operation C2 profile configuration access via missing operation scope on payload lookup

#563 Cross-operation payload build log disclosure via broken Hasura permission filter