First Flight #7: Horse Store

Summary

Ability to execute arbitrary commands on user device

Vulnerability Details

The ffi cheatcode is enable in foundry.toml file, which can execute arbitrary commands on the user's machine.
This presents a significant security risk, as such commands could potentially extract sensitive data, establish a reverse shell for remote control, search for passwords, or install malware.

Impact

MEDIUM. HIgh risk for the user, but currently no scripts are executed in tests. Still a security risk.

Tools Used

Manual review.

Recommendations

Remove ffi = true from foundry.toml file