Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
cheshire-cat-ai/core
main @ 6963feb
29
Fixes
13
CVEs
CRITICAL
Peak severity
60.7%
Coverage
Highlights
Auth Bypass: 25 prior fixes. Scrutinize any change in this area.
core/cat/factory/custom_auth_handler.py: most-fixed (4 issues). Treat as high-risk during review.
23 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Unconfigured or missing API keys could erroneously match null values or default checks, completely bypassing authentication. Secure comparisons must verify the key is configured and populated before validation.
Auth Bypass: WebSocket message parsing allowed identity spoofing because user IDs from the incoming message payload were trusted instead of enforcing the authenticated socket session's user identity.
Auth Bypass: Development and debugging code paths, such as unconditionally returning an admin user from key validation or using hardcoded admin credentials, bypassed real backend authorization structures.