Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

aws/language-servers

              main @ cb0ad5d
            

Fixes

CVEs

HIGH

Peak severity

43.3%

Coverage

Highlights

Auth Bypass: 11 prior fixes. Scrutinize any change in this area.

server/aws-lsp-codewhisperer/src/language-server/agenticChat/agenticChatController.ts: most-fixed (6 issues). Treat as high-risk during review.

17 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Workspace-scoped MCP servers could be abused to execute unauthorized local commands. Fixes introduced strict consent gates that bind execution privileges directly to both a specific workspace and a configuration fingerprint.

Path Traversal: Incomplete path canonicalization and case-insensitivity bugs in platform-specific operations allowed path traversal attacks to access arbitrary host files outside the designated workspace.

Command Injection: Improper argument parsing on Windows and the use of relative paths for system shells allowed malicious inputs or local configurations to trigger arbitrary command injection.