GPT-5 finding
gRPC server starts with insecure credentials; if bound beyond localhost, traffic is unencrypted/unauthenticated
mediumsecurityhigh
- src/grpc/server.ts:41
Using insecure server credentials exposes plaintext transport and no authentication. While default host is localhost, the API allows arbitrary host; accidental exposure (e.g., 0.0.0.0) would be unsafe.
Recommendation
Support TLS credentials via configuration and default to secure if host is not localhost; at minimum, log a prominent warning when starting insecure on non-localhost, or refuse non-localhost without explicit allowInsecure flag.