Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

apache/activemq

              main @ 1ac5eda
            

Fixes

CVEs

CRITICAL

Peak severity

35.7%

Coverage

Highlights

Auth Bypass: 15 prior fixes. Scrutinize any change in this area.

activemq-broker: most-fixed (7 issues). Treat as high-risk during review.

21 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Remote Code Execution: Attackers with access to JMX capabilities or administrative endpoints can add unauthorized transport and network connectors using dangerous URI schemes (such as 'vm://', 'http', and 'masterslave') to execute local code or pivot across the network. Security controls require rigorous scheme validation on all added connector paths.

Insecure Deserialization: Unrestricted JDK deserialization defaults in client-side classloading utilities allowed arbitrary code execution via dangerous gadget classes. Mitigation requires enforcing a strict class allowlist rather than permissive wildcards.

Auth Bypass: Race conditions and sequence flaws in connection handshakes allowed commands like BrokerInfo and durable synchronization requests to process before connection registration and authentication were complete, letting unauthenticated clients hijack synchronization streams.