Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
aaif-goose/goose
main @ 6d7e2da
63
Fixes
3
CVEs
CRITICAL
Peak severity
28.1%
Coverage
Highlights
Auth Bypass: 17 prior fixes. Scrutinize any change in this area.
crates/goose-cli/src/commands/web.rs: most-fixed (3 issues). Treat as high-risk during review.
27 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Command Injection: Attackers could inject malicious environment variables (such as LD_PRELOAD) into deserialized extension maps to bypass security configurations and execute arbitrary host commands during tool execution.
Auth Bypass: Endpoints such as `/mcp-app-proxy` and `/mcp-ui-proxy` bypassed default bearer authentication mechanisms. Failure to centralize checks in a standard router middleware allowed attackers to access resources with inadequate or easily bypassed validation checks.
Path Traversal: Untrusted session identifiers and relative working directories could be leveraged to access, read, or write arbitrary files on the local filesystem due to missing path canonicalization and prefix checks.