Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
julien040/anyquery
main @ b4d3ced
4
Fixes
1
CVEs
HIGH
Peak severity
Highlights
Auth Bypass: 1 prior fix. Scrutinize any change in this area.
controller/llm.go: most-fixed (2 issues). Treat as high-risk during review.
4 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Missing Authentication for Critical Function: Unauthenticated HTTP servers listening locally (such as those for the `anyquery gpt` tool and general server endpoints) allowed local attackers to query the database, retrieve private integration data, or bypass authorization controls as tracked in CVE-2025-61679.
Code Injection: The use of string interpolation instead of safe argument passing when executing system commands (such as running osascript in the browser or reminders plugins) allowed arbitrary shell command execution when handling untrusted user-supplied values.
Sandbox Bypass: A lack of default sandboxing for network-exposed database server instances created risks of SSRF, unauthorized file reads, and arbitrary file writes until explicit sandbox constraints and host allowlists were established.