Severity: Medium — Sensitive Data Retention
Every <chain> call invocation logs the full raw params_val JSON (whatever the user typed via --params) into the rpc_logs collection, with no redaction and no retention policy.
Where
cli/src/cli/handlers.rs:322-365
Root cause
call accepts arbitrary JSON-RPC parameters (including for methods like eth_sendRawTransaction or Sui's transaction-execution methods) and logs them verbatim.
Impact
A user who mistakenly pastes a signed transaction, private key, or other sensitive payload as a parameter has it durably stored in cleartext, forever, compounding the impact of the already-known unauthenticated DB access (#29).
Suggested fix
Redact or opt-out of logging raw params, or explicitly document and cap retention (e.g. TTL index, similar to the fix needed for Txio-labs/txio#30).
Priority: Medium
Labels: bug, security, priority:medium
Severity: Medium — Sensitive Data Retention
Every
<chain> callinvocation logs the full rawparams_valJSON (whatever the user typed via--params) into therpc_logscollection, with no redaction and no retention policy.Where
cli/src/cli/handlers.rs:322-365Root cause
callaccepts arbitrary JSON-RPC parameters (including for methods likeeth_sendRawTransactionor Sui's transaction-execution methods) and logs them verbatim.Impact
A user who mistakenly pastes a signed transaction, private key, or other sensitive payload as a parameter has it durably stored in cleartext, forever, compounding the impact of the already-known unauthenticated DB access (#29).
Suggested fix
Redact or opt-out of logging raw params, or explicitly document and cap retention (e.g. TTL index, similar to the fix needed for Txio-labs/txio#30).
Priority: Medium
Labels: bug, security, priority:medium