Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

processone/ejabberd

              master @ 2f226ab
            

130

Fixes

CVEs

CRITICAL

Peak severity

50.0%

Coverage

Highlights

Auth Bypass: 66 prior fixes. Scrutinize any change in this area.

src/ejabberd_auth.erl: most-fixed (13 issues). Treat as high-risk during review.

101 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Multiple fixes show command execution paths bypassing access checks: internal commands executable from frontends, noauth policy bypass, missing ACL checks, and improper permission definition parsing. The attack surface is broad (XML-RPC, HTTP API, ad-hoc, console) and each has had independent bypass fixes.

Auth Bypass: ACL matching has had repeated bypasses due to improper server scoping (shared_group, user_regexp), rule ordering (allow-all overriding deny), stale cache on reload, and undefined rules defaulting to allow. These affect all authorization decisions across the server.

TLS Verification Bypass / Improper Certificate Validation: TLS certificate verification was missing or misconfigured in multiple external-facing components: LDAP connections used verify_none, S2S accepted untrusted certificates or didn't validate hostnames, and MQTT didn't verify client certificates. These enable MITM and impersonation attacks.