Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
opnsense/core
master @ 10a2749
306
Fixes
37
CVEs
CRITICAL
Peak severity
22.6%
Coverage
Highlights
Auth Bypass: 104 prior fixes. Scrutinize any change in this area.
src/etc/inc/auth.inc: most-fixed (11 issues). Treat as high-risk during review.
100 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: LDAP authentication logic failed to properly check for empty strings, which permitted anonymous bind configurations to authenticate successfully as valid users. It also evaluated failed search results to true, bypassing checks.
Command Injection: Unsanitized input from DHCP and wireless parameters was interpolated into shell commands during configuration generation, allowing remote or privileged attackers to execute arbitrary commands as root.
Auth Bypass: Critical logical bugs in OpenVPN verification scripts, such as inverted status success codes and variable scoping issues in group validation, created pathways for complete authentication bypass.