Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
frdel/agent-zero
main @ 6580ae8
54
Fixes
5
CVEs
HIGH
Peak severity
29.0%
Coverage
Highlights
Auth Bypass: 12 prior fixes. Scrutinize any change in this area.
plugins/_oauth/helpers/codex.py: most-fixed (4 issues). Treat as high-risk during review.
29 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: Improper path validation within file retrieval utilities allows attackers to read arbitrary files outside of designated workspace boundaries, as evidenced by recurring vulnerabilities and active exploitation.
Auth Bypass: Websocket channels and system tools failed to properly bind sessions to validated context identifiers, allowing unauthorized state changes or cross-session interaction.
Cross-Site Request Forgery: Lack of strict origin matching and missing token validations on state-changing API endpoints left the application vulnerable to cross-origin attacks, especially when configured with authentication disabled.