Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

boxlite-ai/boxlite

              main @ bfa7f5a
            

Fixes

CVEs

CRITICAL

Peak severity

46.2%

Coverage

Highlights

Denial of Service: 20 prior fixes. Scrutinize any change in this area.

src/boxlite/src/images/archive/extractor.rs: most-fixed (3 issues). Treat as high-risk during review.

22 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Flawed tar extraction of OCI image layers allowed symbolic and hard links to escape container root directory boundaries. This path traversal vulnerability could result in arbitrary file writes on the host system.

Sandbox Escape: The system previously defaulted to insecure configuration fallbacks, allowing containers to run in an unsandboxed state on host systems. Enforcing secure-by-default execution is vital to maintain the guest-host boundary.

Privilege Escalation: Over-privileged container configurations allowed guests to retain dangerous kernel capabilities such as CAP_SYS_ADMIN, enabling attackers to remount read-only host directories as read-write.