Executive brief
nono-cli is a tool used to manage and run registry-installed software packs. A security flaw allows the tool to run these packs even if their security verification data (lockfiles and trust bundles) is missing, rather than blocking them. This could allow an attacker with local access to bypass security checks and execute untrusted code on the host system, potentially leading to a full system compromise.
Technical details
The `verify_profile_packs` function in nono-cli treats lockfile entries as optional. While the application correctly fails if a trust bundle exists without a corresponding lockfile entry, it fails open if both the `lockfile.json` entry and the `.nono-trust.bundle` are absent. This allows a registry pack to load without artifact hash or provenance verification. This is particularly critical for session hooks which execute on the host outside the sandbox. The vulnerability is fixed in version 0.61.3 (and 0.62.0) by requiring both metadata components to be present for execution.
Affected products
- nolabs-ai nono-cli <= 0.61.2
Timeline
- 2026-06-07: disclosed
- 2026-06-07: patched: Fix committed in db07375
- 2026-07-28: advisory