Affected by GO-2026-5090 and 4 other vulnerabilities

GO-2026-5090: zrok: Broken ownership check in DELETE /api/v2/unaccess allows non-admin to delete global frontend records in github.com/openziti/zrok

GO-2026-5118: zrok: Reflected XSS in GitHub OAuth callback via unsanitized refreshInterval error rendering in github.com/openziti/zrok

GO-2026-5203: zrok: WebDAV drive backend follows symlinks outside DriveRoot, enabling host filesystem read/write in github.com/openziti/zrok

GO-2026-5315: zrok copy writes attacker-controlled WebDAV paths outside the destination root in github.com/openziti/zrok

GO-2026-5329: zrok: Unauthenticated DoS via unbounded memory allocation in striped session cookie parsing in github.com/openziti/zrok

The highest tagged major version is v2.

agentController

package

v1.1.3 Latest Latest Go to latest Published: Aug 20, 2025 License: Apache-2.0 Imports: 8 Imported by: 0

Details

This section is empty.

This section is empty.

This section is empty.

type Config struct {
	ZId          string
	IdentityPath string
}

type Controller struct {
	// contains filtered or unexported fields
}

func NewAgentController(cfg *Config) (*Controller, error)

func (ctrl *Controller) NewClient(serviceName string) (client agentGrpc.AgentClient, conn *grpc.ClientConn, err error)