GCVE-110-VULN-PYPI-2026-000642

If you run aimarket-treasury without TREASURY_CLIENT_TOKEN behind a reverse proxy, tunnel or port forward on the same host, and that proxy runs as the same user as the service or the host is not Linux, every caller of the proxy can use the routes that decide and move money (POST /authorize, /deposit, /vault/fund, /vault/reserve, /vault/top-up and /explain). A keyless service answers only callers it judges local (treasury.service._local_caller). The test added in 0.1.3 (treasury.service._caller_is_this_user) tells a proxy from a local client only by the owner of its socket in /proc/net/tcp: a proxy running as the service's user passes it, and where /proc/net/tcp does not exist (macOS, Windows) every caller passes it. Earlier versions answered every caller (GCVE-110-VULN-PYPI-2026-000614). Affects 0.1.0 through 0.1.3.