Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

All-Hands-AI/OpenHands

              main @ d4059af
            

150

Fixes

CVEs

CRITICAL

Peak severity

45.9%

Coverage

Highlights

Denial of Service: 57 prior fixes. Scrutinize any change in this area.

enterprise/server/routes/auth.py: most-fixed (6 issues). Treat as high-risk during review.

43 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Command Injection: Unsanitized input in git utility helpers allows authenticated attackers to escape shell boundaries and execute arbitrary commands in the containerized execution environment. This is historically tracked via CVE-2026-33718 and addressed using proper command arguments escaping.

Path Traversal: File operations executed by the agent in the sandbox can escape the designated workspace directory and interact with arbitrary system files on the host if paths are not strictly canonicalized and validated against a prefix path directory.

Auth Bypass: Missing API validation checks and unsafe fallback mechanisms in routing middleware allowed cross-tenant requests to bypass authorization controls, potentially exposing resources across different organizations.