Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

1panel-dev/maxkb

              v2 @ 36502be
            

253

Fixes

CVEs

CRITICAL

Peak severity

29.0%

Coverage

Highlights

Auth Bypass: 137 prior fixes. Scrutinize any change in this area.

apps/common/utils/tool_code.py: most-fixed (32 issues). Treat as high-risk during review.

153 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Sandbox Escape: A high volume of escapes target the LD_PRELOAD wrapper, bypassing path validation via alternate execution systems, unblocked system calls like clone/fork, and network bypasses like connect/sendto. Ensure strict syscall filtering and dynamic library path validation.

Auth Bypass: Authorization checks routinely suffered from logic flaws including un-scoped database queries, missing permission decorators, and cross-workspace object leaks. All resource queries must be bound to both the authenticated user ID and the active workspace context.

Remote Code Execution: Insecure handling of Model Context Protocol (MCP) custom configurations and transport parsing allows attackers to bypass validation via custom variables, achieving code execution through unauthorized transport protocols like stdio.