7.3

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-w7pm-9g55-mxfm

GHSA-w7pm-9g55-mxfm: stigmem-node's unsigned plugin override could be enabled without a second explicit acknowledgment

Impact

A single configuration flag could disable plugin signature enforcement. If an operator unintentionally carried that setting into an environment where plugin paths are writable by less-trusted users, unsigned plugin code could be loaded.

Patches

Patched in 0.9.0a2. Disabling plugin signature enforcement now requires a second explicit acknowledgment value.

Workarounds

Before upgrading, keep plugin signing required in all shared or production environments and ensure plugin directories are not writable by untrusted users.

Upgrade

Upgrade to the patched release:

pip install --upgrade --pre stigmem-node

If developers install through the Stigmem meta-package instead, they should use the matching extra for deployments, for example:

pip install --upgrade --pre 'stigmem[node]'

Resources

Release: https://github.com/eidetic-labs/stigmem/releases/tag/v0.9.0a2
Changelog: https://github.com/eidetic-labs/stigmem/blob/v0.9.0a2/CHANGELOG.md#L14-L35
Security policy and posture: https://github.com/eidetic-labs/stigmem/blob/v0.9.0a2/SECURITY.md

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-w7pm-9g55-mxfm

GHSA-w7pm-9g55-mxfm:

7.3

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
stigmem-node	pip	< 0.9.0a2	0.9.0a2

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists because a single configuration setting, plugin_signing_required, defaulted to False, which disabled signature verification for plugins. This allowed a user with access to the plugin directory to load and execute unsigned code. The core of the vulnerability lies in the stigmem_node.plugins.lifecycle.register_discovered_plugins function, which contains the conditional logic that bypasses signature checks based on this flag.

The patch addresses this in two main ways. First, it changes the default value of plugin_signing_required to True in node/src/stigmem_node/settings.py, making the secure configuration the default. Second, it introduces a new middleware, stigmem_node.main.unsigned_plugin_override_warning, which logs a prominent warning on every single HTTP request if the insecure setting is active. This ensures that running in the vulnerable configuration is an explicit and noisy choice, rather than an insecure default.

Therefore, register_discovered_plugins is the function containing the vulnerable logic, and unsigned_plugin_override_warning is a key runtime indicator that would appear in logs and profiles if the system is in its vulnerable, insecurely configured state.

Vulnerable functions

stigmem_node.plugins.lifecycle.register_discovered_plugins

node/src/stigmem_node/plugins/lifecycle.py

This function is responsible for discovering and registering plugins. In the vulnerable version, its behavior is controlled by the `plugin_signing_required` setting, which defaulted to `False`. When this setting is `False`, the function bypasses signature verification and loads potentially unsigned plugins, leading to arbitrary code execution. The patch changes the default to `True` and adds extra warnings, but the core vulnerable logic resides in this function's conditional path that is taken when signature checking is disabled.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.