Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

ail-project/ail-framework

              master @ 44333ee
            

Fixes

CVEs

HIGH

Peak severity

40.0%

Coverage

Highlights

Auth Bypass: 13 prior fixes. Scrutinize any change in this area.

bin/lib/Tracker.py: most-fixed (4 issues). Treat as high-risk during review.

15 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The global tracker interface lacked proper organizational and user ID access validation, allowing unauthorized viewing and editing of critical tracker infrastructure. Fixing this required implementing dedicated read/access ACL authorization helpers and casting Redis return values appropriately.

Path Traversal: File-serving endpoints dynamically returned files using Flask's send_from_directory API with insufficient validation. Hardening required strict alphanumeric and ASCII validation of filenames to prevent traversal beyond the designated directories.

Path Traversal: Improper path resolution during investigation downloads allowed authenticated users to bypass directory limits, tracked under CVE-2026-56448. The vulnerability required implementing canonicalization paired with explicit os.path.commonpath boundary verification.