Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

abhi1693/openclaw-mission-control

              master @ 75eb8b0
            

Fixes

CVEs

HIGH

Peak severity

57.7%

Coverage

Highlights

Auth Bypass: 13 prior fixes. Scrutinize any change in this area.

frontend/src/proxy.ts: most-fixed (7 issues). Treat as high-risk during review.

16 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: A recurring series of critical failures in the Next.js proxy occurred where asynchronous Clerk auth() calls were not awaited, allowing unauthenticated requests to bypass protection routes entirely. Developers must always await auth() and verify the session or redirect explicitly.

SSRF: The skills marketplace is vulnerable to SSRF by cloning remote repositories without validating scheme and destination. Any cloned URLs must be validated immediately prior to execution to ensure they resolve only to HTTPS schemas and do not target local or private network ranges.

Auth Bypass: Failure to isolate tenants across boards and gateways allowed potential cross-tenant leakage. Queries must fail-closed and enforce organization filter boundaries when a gateway lookup is missing or incomplete.