PEI-007 Parser Error Path Fail-Open

Policy Enforcement Integrity: Attacks that bypass policy enforcement via threshold fallbacks, config file injection, or parser error paths that fail open

Description

Tests if malformed policy input causes the enforcement engine to fail open instead of defaulting to DENY

Remediation

Enforcement engine must default to DENY on any parse error, malformed input, or unrecognized policy structure. Never fail open.

Severity

CRITICAL

OASB Control

3.1

CWE

CWE-391

PreviousPEI-006 Agent Config Runtime Modification NextPEI-008 Undefined Policy Action Exploitation