Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

azure/azure-cli

              dev @ b3b6906
            

Fixes

CVEs

HIGH

Peak severity

0.0%

Coverage

Highlights

Path Traversal: 2 prior fixes. Scrutinize any change in this area.

src/azure-cli/azure/cli/command_modules/acs/custom.py: most-fixed (3 issues). Treat as high-risk during review.

2 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Untrusted Search Path: Resolving command line utilities (such as docker or podman) without specifying absolute paths or validating that they originate outside the current working directory allows local attackers to hijack execution via malicious binaries placed in the working directory.

Information Disclosure: Sending Azure access tokens to unvalidated next-link pagination endpoints can leak highly sensitive credentials to lookalike, attacker-controlled domains if the origin is not strictly verified.

Command Injection: Executing external binaries using shell=True with formatted strings allows arbitrary command injection if user-controlled input is not strictly isolated.