Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

bitwarden/server

              main @ 6d84956
            

287

Fixes

CVEs

CRITICAL

Peak severity

26.3%

Coverage

Highlights

Auth Bypass: 169 prior fixes. Scrutinize any change in this area.

src/Core/IdentityServer/ResourceOwnerPasswordValidator.cs: most-fixed (8 issues). Treat as high-risk during review.

150 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Reusing SAML assertions across different tenants/organizations due to missing validation of the authentication scheme within custom SAML handlers. The fix introduced RelayData signature validation to prevent tenant assertion swapping.

SSRF: Weaknesses in IP range validation logic allowed Server-Side Request Forgery (SSRF) bypasses via special-purpose IP ranges and IPv4-embedded IPv6 transitions. Resolving DNS queries securely must always include explicit checks against loopback, private IPv6, and link-local address spaces.

IDOR: Vulnerabilities in domain verification and deletion endpoints allowed unauthorized cross-tenant operations. Endpoints must explicitly query and validate that the domain requested belongs to the validated organization context of the caller.