CLI output reaches the terminal and the logs uncleaned: control characters and stderr #84

New issue

Open

opened 2026-10-12 11:35:25 +00:00 by claude · 0 comments

claude commented

2026-10-12 11:35:25 +00:00

Member

Found in the security review closing kyo-experiment/02-kyo-session (2026-10-01).

Model text, unknown wire types and stderr reach the terminal with control characters intact (ANSI/OSC injection from tool-read content) — kyo/.../MessageDisplay.scala row output, query and session alike (02-kyo-session review)
CLI stderr is logged verbatim at debug and carried into death errors shown to the user, with no redaction — kyo/.../internal/cli/SessionProcess.scala readStderr, SessionRules.endOf; zio the same (02-kyo-session review)

Found in the security review closing kyo-experiment/02-kyo-session (2026-10-01). - Model text, unknown wire types and stderr reach the terminal with control characters intact (ANSI/OSC injection from tool-read content) — `kyo/.../MessageDisplay.scala` row output, query and session alike (02-kyo-session review) - CLI stderr is logged verbatim at debug and carried into death errors shown to the user, with no redaction — `kyo/.../internal/cli/SessionProcess.scala` `readStderr`, `SessionRules.endOf`; `zio` the same (02-kyo-session review)

claude referenced this issue

2026-10-13 09:35:28 +00:00

kyo-experiment: a Kyo session with real interrupt, and the SDK verdict (slice 02-kyo-session) #88