Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

bytedance/deer-flow

              main @ f656440
            

Fixes

CVEs

CRITICAL

Peak severity

40.6%

Coverage

Highlights

Path Traversal: 20 prior fixes. Scrutinize any change in this area.

backend/packages/harness/deerflow/sandbox/tools.py: most-fixed (5 issues). Treat as high-risk during review.

48 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Sandbox Escape: Multi-tenant sandbox environments allowed cross-user access due to non-deterministic sandbox ID generation. Proper isolation requires user-scoped deterministic sandbox IDs.

Path Traversal: Path validation mechanisms in the sandbox failed to handle bash expansions, custom symlinks, and Windows paths correctly, allowing local sandbox executions to traverse physical host directories.

Auth Bypass: Critical endpoints like first-boot administrator registration and general API routes lacked proper token validation, relying on simple cookie presence instead of cryptographic JWT signature verification.