Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

blockrunai/franklin

              main @ 9f1444a
            

Fixes

CVEs

CRITICAL

Peak severity

38.9%

Coverage

Highlights

Auth Bypass: 4 prior fixes. Scrutinize any change in this area.

src/agent/bash-guard.ts: most-fixed (4 issues). Treat as high-risk during review.

13 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Sandbox Bypass: The agent's bash-guard component executes shell commands and historically suffered from multiple sandbox and directory bypasses. These occurred due to a lack of command input normalization before regex validation, leaving vectors open to brace-expansion, quotes, escapes, parameter expansion, and prefix tools like 'env' or 'sudo'.

CSRF: Multiple local servers and proxy interfaces failed to validate requests from cross-origin web applications, exposing sensitive and mutating API routes (including wallet actions) to CSRF. Secure enforcement requires strict validation of HTTP Origin and WebSocket handshake headers.

Auth Bypass: Services such as the payment proxy and panel servers bound to '0.0.0.0', making them accessible across the local network to unauthorized devices. Restricting listeners strictly to local loopback addresses is critical for preventing unauthorized control of the user's wallet.