Affected by GO-2026-5090 and 4 other vulnerabilities

GO-2026-5090: zrok: Broken ownership check in DELETE /api/v2/unaccess allows non-admin to delete global frontend records in github.com/openziti/zrok

GO-2026-5118: zrok: Reflected XSS in GitHub OAuth callback via unsanitized refreshInterval error rendering in github.com/openziti/zrok

GO-2026-5203: zrok: WebDAV drive backend follows symlinks outside DriveRoot, enabling host filesystem read/write in github.com/openziti/zrok

GO-2026-5315: zrok copy writes attacker-controlled WebDAV paths outside the destination root in github.com/openziti/zrok

GO-2026-5329: zrok: Unauthenticated DoS via unbounded memory allocation in striped session cookie parsing in github.com/openziti/zrok

The highest tagged major version is v2.

agentController

package

v1.0.5 Latest Latest Go to latest Published: Jun 4, 2025 License: Apache-2.0 Imports: 8 Imported by: 0

Details

This section is empty.

This section is empty.

func NewAgentClient(serviceName string, cfg *Config) (client agentGrpc.AgentClient, conn *grpc.ClientConn, err error)

type Config struct {
	ZId          string
	IdentityPath string
}