Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

epam/ai-dial-chat

              development @ 576e1b0
            

Fixes

CVEs

HIGH

Peak severity

45.5%

Coverage

Highlights

Auth Bypass: 8 prior fixes. Scrutinize any change in this area.

apps/chat-api/src/common/validators/safe-toolset-name.validator.ts: most-fixed (2 issues). Treat as high-risk during review.

17 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Multiple fixes in the same validator show that toolset names are a repeated attack surface, with bypasses via encoding and segment-level tricks.

Path Traversal: File operations (upload, download, delete, metadata) were vulnerable to path traversal through archive entries and unencoded paths passed to the Dial client.

Auth Bypass: Azure AD role extraction and JWT token handling had two distinct flaws: misconfigured environment variable names and stale role persistence across token refreshes.