JakubandClaude Opus 5.5 0346cebaf6 fix(security): a kept route no longer grants the contact remote CLI ...

CONTACT_FLAG_ROUTE_PINNED was bit 4 (0x10) of ContactInfo::flags, which
upstream 1.18 made isRemoteCLIAllowed(): keeping a route to a contact let it
run any CLI command on the device remotely (radio, name, PIN, reboot,
wifi.pwd), and a contact the app allowed CLI had its route held. The kept
route moves to bit 7 (0x80). Not in any release (the route editor came
after rc3).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-15 15:42:14 +02:00

..

build-flags.md

docs: the app on BT and USB at once, /prefs.json, UIColor, txdelay and agc commands

2026-10-15 14:42:04 +02:00

feature-matrix.md

refactor(companion): our MyMesh additions in their own headers

2026-10-11 21:26:59 +02:00

ui-core.md

fix(security): a kept route no longer grants the contact remote CLI

2026-10-15 15:42:14 +02:00

ui-framework.md

docs: the app on BT and USB at once, /prefs.json, UIColor, txdelay and agc commands

2026-10-15 14:42:04 +02:00