Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

livekit/agents-js

              main @ 080db3e
            

Fixes

CVEs

HIGH

Peak severity

38.5%

Coverage

Highlights

Denial of Service: 9 prior fixes. Scrutinize any change in this area.

agents/src/voice/agent_activity.ts: most-fixed (2 issues). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Denial of Service: Multiple fixes address hangs and resource leaks in the voice agent lifecycle, including interrupted speech generation, shutdown hangs, and unclosed streams. These can cause agents to become unresponsive, impacting availability.

Denial of Service: Memory and resource leaks in IPC process pool, OpenAI Realtime plugin, and STT WebSocket handling can lead to exhaustion over time, affecting all sessions.

Information Disclosure: Telemetry exports included sensitive content (transcripts, chat context, function tool arguments/outputs, participant identity, room name) without redaction. This can leak user data to observability backends.