Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

gnachman/iTerm2

              master @ 27dc3c0
            

Fixes

CVEs

HIGH

Peak severity

30.6%

Coverage

Highlights

Command Injection: 17 prior fixes. Scrutinize any change in this area.

sources/PTYSession.m: most-fixed (9 issues). Treat as high-risk during review.

74 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Command Injection: Multiple distinct sinks (writeTask, system, eval, stringWithFormat:) accept terminal/URL/SSH-controlled data without consistent shell escaping or allowlisting, enabling arbitrary command execution.

Auth Bypass: API/WebSocket authorization has been bypassed via process ID spoofing, REPL special-casing, missing library-version headers, and weak content checks; multiple fixes were needed to harden identity and consent.

Sandbox Escape: Image decoding (sixel) and SSH framer were repeatedly found executing in-process or with insufficient sandbox policy, allowing escape to the host; mitigations moved decoding to XPC helpers and tightened sandbox profiles.