Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

dust-tt/dust

              main @ 79f2378
            

360

Fixes

CVEs

CRITICAL

Peak severity

44.1%

Coverage

Highlights

Auth Bypass: 248 prior fixes. Scrutinize any change in this area.

front/lib/auth.ts: most-fixed (9 issues). Treat as high-risk during review.

186 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Frequent authorization logic flaws and missing workspace-scoping constraints on conversation resource access allowed potential cross-workspace read/write leaks. Proper authorization must be explicitly verified in base fetches and model queries.

Sandbox Escape: The sandbox runtime has experienced multiple bypasses of its egress filters, including silent failures of iptables rules, loopback ssh exposures, and DNS exfiltration routes. Hardening now depends on strict user privilege isolation and mandatory kernel-enforced nftables rules.

SSRF: User-supplied endpoints for remote MCP servers, database connectors, and generic web crawler targets represent severe SSRF vectors. All outbound requests must route through verified, isolated egress proxy instances enforcing strict private IP blocklists.