Security context

Highlights

Command Injection: 6 prior fixes. Scrutinize any change in this area.

harbor.sh: most-fixed (9 issues). Treat as high-risk during review.

7 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Command Injection: Unsafe shell evaluation patterns, such as evaluating untrusted string templates or running commands with unsanitized environment variables, expose the system to arbitrary command injection. Specifically, commands executed via eval and unquoted variables inside trap routines have repeatedly proven vulnerable.

Path Traversal: The profile management subsystem previously copied files to target destinations using untrusted profile names without checking for traversal components, potentially allowing attackers to overwrite arbitrary files outside the intended destination directory.

Privilege Escalation: The container execution setup bypassed privileged drop rules and fell back to root execution when a local host user ID (HARBOR_USER_ID) was not correctly mapped in the container's passwd database, allowing potential container escape or unauthorized local operations.