Project
cortex
Description
The authentication token file is created with 0644 permissions (world-readable) instead of 0600.
Error Message
Debug Logs
System Information
Bounty Version: 0.1.0
OS: Ubuntu 24.04 LTS
CPU: AMD EPYC-Genoa Processor (8 cores)
RAM: 15 GB
Screenshots
No response
Steps to Reproduce
cortex login
ls -la ~/.config/cortex/credentials
# -rw-r--r-- (644) instead of -rw------- (600)
Expected Behavior
Credentials file should have 0600 permissions (owner read/write only).
Actual Behavior
File is world-readable, exposing tokens.
Additional Context
No response