nono-cli registry pack verification can fail open when provenance metadata is absent
- Product
- nono-cli
- Affected
- nono-cli <= 0.61.2
- Fixed in
- 0.61.3
Last verified against sources: October 26, 2026
Am I affected?
nono-cli: affected nono-cli <= 0.61.2. Fixed in 0.61.3.
- Check your version: run
cargo tree -i nono-cli. Versions <= 0.61.2 of nono-cli are affected. [1]
What to do now
- Upgrade to the fixed version: run
cargo update -p nono-cli --precise 0.61.3(first patched version 0.61.3). [1] - Reinstall with: nono pull <namespace>/<pack> --force [1]
General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.
What happened
- nono-cli's registry pack verification can fail open when provenance metadata is absent. [1]
verify_profile_packstreats the lockfile entry as optional. [1]- If both the lockfile entry and trust bundle are absent, nono may accept an installed registry pack without artifact hash verification or provenance verification. [1]
Impact
- If both the lockfile entry and trust bundle are absent, nono may accept an installed registry pack without artifact hash verification or provenance verification. [1]
- This is especially important for pack-provided session hooks, because session hooks execute on the host outside the sandbox. [1]
- A pack that contributes host-executed code should not run unless nono can verify that the code is a locked and trusted pack artifact. [1]
What was done
- The recommended fix is to require a matching lockfile entry in
~/.config/nono/packages/lockfile.jsonfor any registry pack selected for execution. [1] - The recommended fix is to require a present and valid
.nono-trust.bundlein the installed pack directory. [1] - If either is missing, fail closed with a reinstall instruction. [1]
- Packages: rust/nono-cli affected <= 0.61.2 patched 0.61.3. [1]
Sources
- GHSA-hc4m-q9jh-xw4j — GitHub Advisory Database
Every statement above was checked against these sources before publishing. Spotted an error? Tell us and we will correct it with a dated note.
Share advisory brief with your team
Copy a plain-text summary for Slack, GitHub issues, or team security channels.
nono-cli registry pack verification can fail open when provenance metadata is absent
Product: nono-cli | Affected: nono-cli <= 0.61.2 | Fixed in: 0.61.3
Summary: nono-cli's registry pack verification can fail open when provenance metadata is absent.
Source & remediation on AgentArmorHQ: https://agentarmorhq.com/incidents/2026/07/ghsa-hc4m-q9jh-xw4j-nono-cliCorrections
Report an error or request a correction. We review requests within 5 business days and add a dated correction note.
Discussions for nono-cli
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.