Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

hkuds/nanobot

              main @ 943191f
            

Fixes

CVEs

CRITICAL

Peak severity

60.6%

Coverage

Highlights

Auth Bypass: 24 prior fixes. Scrutinize any change in this area.

nanobot/agent/tools/shell.py: most-fixed (12 issues). Treat as high-risk during review.

54 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Empty or misconfigured allowlists on message channels historically defaulted to 'allow all', permitting unauthorized message delivery and control over the agent loop. Verification logic has struggled with multi-part or unnormalized sender IDs.

Path Traversal: Filesystem tools and path-handling helpers routinely suffered from path traversal because they relied on weak string comparisons or resolved symlinks outside workspace roots instead of strict path canonicalization.

SSRF: Tools fetching external web assets or executing redirects are highly vulnerable to SSRF. Resolving domains and following redirects without sanitizing loopback or private ranges can lead to local network probes.