Files
MeshCore-Solo/docs
JakubandClaude Opus 5.5 0346cebaf6 fix(security): a kept route no longer grants the contact remote CLI
CONTACT_FLAG_ROUTE_PINNED was bit 4 (0x10) of ContactInfo::flags, which
upstream 1.18 made isRemoteCLIAllowed(): keeping a route to a contact let it
run any CLI command on the device remotely (radio, name, PIN, reboot,
wifi.pwd), and a contact the app allowed CLI had its route held. The kept
route moves to bit 7 (0x80). Not in any release (the route editor came
after rc3).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-15 15:42:14 +02:00
..
2026-03-31 00:51:15 +13:00
2026-02-04 00:59:13 +13:00
2026-02-04 00:59:13 +13:00
2026-10-15 19:42:40 +11:00
2026-02-12 17:12:23 +13:00
2026-09-13 11:40:25 +10:00
2026-07-06 02:04:56 +12:00
2026-09-30 14:52:58 +13:00