Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
kortix-ai/suna
main @ 0dbe20b
196
Fixes
1
CVEs
CRITICAL
Peak severity
Highlights
Auth Bypass: 93 prior fixes. Scrutinize any change in this area.
apps/api/src/index.ts: most-fixed (6 issues). Treat as high-risk during review.
111 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Insecure authentication and authorization validation across API routes, including missing project-scope verification, leaky endpoint exemptions, and problematic backward-compatibility fallbacks where invalid or empty tokens were mapped as valid user or account contexts.
Command Injection: Critical shell interpolation hazards existed when syncing sandbox environments. Untrusted shell inputs passed to raw execution utilities (like rawExecSync and execOnHost) were corrected by utilizing Base64-encoded payloads with inline Python script execution and strict shell quoting.
Path Traversal: Multiple path traversal vulnerabilities occurred in files and templates retrieval, snapshot layers, and tools. Attackers could read files outside the designated workspace because paths were not canonicalized and checked against allowed root prefixes.