Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

dataelement/clawith

              main @ fa8a429
            

Fixes

CVEs

CRITICAL

Peak severity

21.2%

Coverage

Highlights

Auth Bypass: 36 prior fixes. Scrutinize any change in this area.

backend/app/api/auth.py: most-fixed (5 issues). Treat as high-risk during review.

36 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Weak identity matching, pattern-based ilike queries instead of exact matching, and flawed third-party SSO identifier mappings have repeatedly allowed account takeover and authorization bypasses.

Sandbox Escape: Code execution tools risked host takeover by failing to strictly enforce Bubblewrap (bwrap) isolation and silently falling back to un-sandboxed local command execution when dependencies were missing.

Path Traversal: Workspace mutation tools and path resolution logic were vulnerable to directory traversal, allowing agents or users to escape the designated workspace directory unless canonicalization and prefix checks were strictly enforced.