32°N Security Findings MSS SK 2026 0032

MSS-SK-2026-0032

Plaintext AWS credentials stored in plugin config

Summary

Plaintext AWS credentials stored in plugin config.

Impact

see PoC script header

Proof of concept

research/audits/signalk/exploits/0032-sk-logs-to-aws-s3-plaintext-aws-credentials-stored-in-plugin.py/

  • 0032-sk-logs-to-aws-s3-plaintext-aws-credentials-stored-in-plugin.py — single-file