Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

gianlucabassani/nidavellir

              main @ f1c9121
            

Fixes

CVEs

CRITICAL

Peak severity

Highlights

Auth Bypass: 3 prior fixes. Scrutinize any change in this area.

cyber-range/services/scenario-orchestrator/api.py: most-fixed (4 issues). Treat as high-risk during review.

5 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The scenario orchestrator exposed deployment, setup, and teardown API endpoints without basic authentication or API-key enforcement, allowing unauthenticated remote control of orchestrator resources.

Auth Bypass: Valid agent keys could bypass tenant-to-arena isolation barriers and execute commands in unauthorized environments due to a lack of server-side agent-to-arena binding checks.

Path Traversal: User-supplied scenario names were directly resolved to filesystem paths without strict alphanumeric validation, permitting arbitrary file retrieval or template injection through path traversal patterns.