All issues

Search results

[Bug bounty] monk.install.run fails 9 in a row with the same 'Monk CLI and daemon need to be installed.' string — same string across 4 workspace contexts, no diagnostic context

Status: Open.

#487 In monk-io/monk-plugin;

· NyxSpecter4 opened on Aug 31, 2026

[Bug bounty] monk.workload.stop error string contains UTF-16 LE NUL bytes between every character — terminal renders disconnect, downstream grep fails

Status: Open.

#486 In monk-io/monk-plugin;

· NyxSpecter4 opened on Aug 31, 2026

[Bug bounty] monk.install.run fails 9 in a row with the same 'Monk CLI and daemon need to be installed.' string — same string across 4 workspace contexts, no diagnostic context

Status: Open.

#485 In monk-io/monk-plugin;

· NyxSpecter4 opened on Aug 31, 2026

[Bug bounty] monk.workload.stop error string contains UTF-16 LE NUL bytes between every character — terminal renders disconnect, downstream grep fails

Status: Open.

#484 In monk-io/monk-plugin;

· NyxSpecter4 opened on Aug 31, 2026

[Bug bounty] monk.cluster.upgrade accepts approval for raw 'not-a-version' string — semver/version-shape validation happens only post-approval, not at MCP boundary

Status: Open.

#483 In monk-io/monk-plugin;

· NyxSpecter4 opened on Aug 31, 2026

[Bug bounty] monk.cluster.create logs workspaceRoot='C:\Windows\System32' against an active workspace session — workspace-context binding leaks across dashboard tabs (gauntlet step 4)

Status: Open.

#482 In monk-io/monk-plugin;

· NyxSpecter4 opened on Aug 31, 2026

[Bug bounty] monk.watcher.remove emits 4 distinct error shapes in 95 min — no error-shape categorisation, no retry-hint, no escalation path

Status: Open.

#481 In monk-io/monk-plugin;

· NyxSpecter4 opened on Aug 31, 2026

[Bug bounty] Windows install-wsl-distro times out before a healthy slow Ubuntu rootfs download can finish

bug-bountyFiled during the July 2026 Monk plugin bug bountyFiled during the July 2026 Monk plugin bug bounty

Status: Open.

#477 In monk-io/monk-plugin;

· mingdongwu96-git opened on Aug 31, 2026

[Bug bounty] monk.install.status ready:true contradicts monk.runtime.status ready:false — monkd-ping ok while monk-cli fails (simultaneous MCP split-brain)

agent:all

bug-bountyFiled during the July 2026 Monk plugin bug bountyFiled during the July 2026 Monk plugin bug bounty

effort:medium

impact:high

kind:bug

os:windows

ver:monkd-3.21.3Filed against monkd 3.21.3Filed against monkd 3.21.3

ver:v0.1.58Filed against plugin v0.1.58Filed against plugin v0.1.58

Status: Open.

#473 In monk-io/monk-plugin;

· NyxSpecter4 opened on Aug 31, 2026

[Bug bounty] Antigravity PreInvocation hook never auto-updates monk-agent — skips scripts/ensure-monk-agent bootstrap

agent:antigravity

bug-bountyFiled during the July 2026 Monk plugin bug bountyFiled during the July 2026 Monk plugin bug bounty

effort:medium

impact:high

kind:bug

os:all

ver:v0.1.58Filed against plugin v0.1.58Filed against plugin v0.1.58

Status: Open.

#472 In monk-io/monk-plugin;

· NyxSpecter4 opened on Aug 31, 2026

[Bug bounty] PreToolUse block-monk fallback regex bypassed by shell separators (monk; / monk& / monk|)

agent:all

bug-bountyFiled during the July 2026 Monk plugin bug bountyFiled during the July 2026 Monk plugin bug bounty

effort:low

impact:medium

kind:bug

os:all

ver:v0.1.58Filed against plugin v0.1.58Filed against plugin v0.1.58

Status: Open.

#471 In monk-io/monk-plugin;

· NyxSpecter4 opened on Aug 30, 2026

[Bug bounty] Cross-platform hook execution fails on Linux/POSIX due to unescaped Windows backslashes in hooks. json

agent:all

bug-bountyFiled during the July 2026 Monk plugin bug bountyFiled during the July 2026 Monk plugin bug bounty

effort:ultra-low

impact:nitpick

kind:bug

needs-triage-humanDedup or scope verdict needs a human callDedup or scope verdict needs a human call

os:linux

ver:monkd-3.21.3Filed against monkd 3.21.3Filed against monkd 3.21.3

ver:v0.1.58Filed against plugin v0.1.58Filed against plugin v0.1.58

Status: Open.

#466 In monk-io/monk-plugin;

· CapitanVZL opened on Aug 30, 2026