Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
proxmox/pve-manager
master @ a1480fa
65
Fixes
0
CVEs
CRITICAL
Peak severity
34.8%
Coverage
Highlights
Auth Bypass: 37 prior fixes. Scrutinize any change in this area.
PVE/API2/VZDump.pm: most-fixed (7 issues). Treat as high-risk during review.
42 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Backup endpoints repeatedly lacked permission checks on storage, pools, and VM config extraction, allowing unauthorized backup operations and data access.
Auth Bypass: Ceph API endpoints had missing or duplicate permission keys, and MDS keyring caps were overly broad, enabling unauthorized cluster management and privilege escalation.
Auth Bypass: Pool-related permission checks used Pool.Allocate instead of Pool.Audit, and pool operations lacked checks entirely, allowing unauthorized access to pool information and modifications.