Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

josh-xt/agixt

              main @ 3a32024
            

Fixes

CVEs

CRITICAL

Peak severity

33.3%

Coverage

Highlights

Auth Bypass: 44 prior fixes. Scrutinize any change in this area.

agixt/MagicalAuth.py: most-fixed (40 issues). Treat as high-risk during review.

65 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: MagicalAuth is the primary security boundary of the application and has suffered dozens of critical flaws, including wildcard scope expansions, unverified 'sub' claim trust, missing company membership checks, and role validation logical inversions. Developers must strictly validate tenant ownership of resources using verified token contexts instead of client-supplied arguments.

Path Traversal: Improper path resolution and validation within file operations and agent command execution directories allowed authenticated attackers to traverse outside the designated workspace using crafted dot-segments, as represented by CVE-2026-39981. This risk requires strict path canonicalization and prefix-matching bounds.

Remote Code Execution: Executing Python code or system shell commands directly via subprocess calls exposes the host system to immediate compromise. This requires forcing all dynamic scripts to execute strictly within a restricted, containerized sandbox using the safeexecute library.