Production report endpoints receive attacker-controlled payloads, but collector.Handler currently reads…
Production report endpoints receive attacker-controlled payloads, but collector.Handler currently reads…: a task in MiMo-V2.6-RL-oss: Agentic RL Environments (MiMo RL release). Production report endpoints receive attacker-controlled payloads, but collector.Handler currently reads the whole request…
The task
Production report endpoints receive attacker-controlled payloads, but collector.Handler currently reads the whole request without a bound and can invoke callbacks for early entries before discovering that a later entry is invalid. Harden this existing handler so rejection is…
Part of XiaomiMiMo/MiMo-V2.6-RL-oss.