Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

agent-field/agentfield

              main @ b9b8577
            

Fixes

CVEs

HIGH

Peak severity

13.0%

Coverage

Highlights

Auth Bypass: 13 prior fixes. Scrutinize any change in this area.

control-plane/internal/server/middleware/auth.go: most-fixed (3 issues). Treat as high-risk during review.

21 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Unconfigured or blank credentials (such as Admin tokens or API keys) caused the control-plane server to fail open and allow completely unauthenticated administrative/API access. This has been resolved by enforcing fail-closed checks unless an insecure bypass flag is explicitly set.

SSRF: Outbound requests, webhooks, and DID resolution are highly vulnerable to SSRF. Attackers can target internal loopback, private IP ranges, or local services if requests are not routed through custom, validated transports that actively block private/link-local addresses and enforce body limits.

Auth Bypass: Agent registration and execution handlers lacked necessary lifecycle state checks. This allowed revoked, deleted, or pending-approval agents to self-approve during re-registration, execute reasoning/skill workflows, or bypass intended administrative bans.