Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

agentdeskai/browser-tools-mcp

              main @ 99acee8
            

Fixes

CVEs

CRITICAL

Peak severity

33.3%

Coverage

Highlights

Auth Bypass: 1 prior fix. Scrutinize any change in this area.

browser-tools-mcp/src/util/redact.ts: most-fixed (1 issue). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Remote Code Execution: Command injection via osascript with interpolated path allowed arbitrary code execution; the fix removed the vulnerable path entirely, indicating a fundamental design flaw in passing user-controlled paths to shell commands.

Information Disclosure: Sensitive data (JWTs, session IDs) could leak because redaction ran after truncation and missed session ID patterns; the fix reordered scrubbing and expanded patterns, showing the redaction logic was incomplete and order-dependent.

Auth Bypass: Screenshot capture connected to any server without verifying identity, allowing a malicious server to receive screenshots; the fix added a /.identity endpoint check, but this guard may not cover all capture paths.