Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

ajenti/ajenti

              master @ f1d46c8
            

Fixes

CVEs

CRITICAL

Peak severity

57.6%

Coverage

Highlights

Auth Bypass: 8 prior fixes. Scrutinize any change in this area.

ajenti-core/aj/auth.py: most-fixed (4 issues). Treat as high-risk during review.

20 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Insecure Deserialization: Unsafe deserialization of configuration files using PyYAML's default loader allowed arbitrary code execution under high-privilege contexts. Developers must strictly enforce safe loading parsers.

Auth Bypass: The SSL client certificate authentication mechanism was entirely bypassed due to a stub callback that unconditionally returned True and type-mismatch bugs when validating certificate serial numbers.

Command Injection: The OS authentication engine spawned shell commands with unescaped user credentials, enabling immediate remote code execution during the login phase via pexpect.