Boot prompt YES/NO natural-language flow has no provenance binding
Finding PUB-F004 · c0ad509ada05
MEDIUMconfirmedinjectionopus48
- Framework
- owasp-top-10
- Priority score
- 0.4900
- Reachability
- unknown
- Chain depth
- 1
- Discovered
- Jun 11, 2026, 02:20 PM
Description
The boot confirmation accepts free-form YES/NO with no provenance binding, enabling prompt-injected confirmation of dangerous operations.
Validation
No validation rationale recorded.