Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

lastmile-ai/mcp-agent

              main @ f62d849
            

Fixes

CVEs

HIGH

Peak severity

Highlights

Auth Bypass: 4 prior fixes. Scrutinize any change in this area.

src/mcp_agent/cli/auth/main.py: most-fixed (2 issues). Treat as high-risk during review.

4 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Inadequate session and context isolation in concurrent server environments allowed user session leakage. Developers must enforce strict request-scoped context boundaries to ensure one user's context cannot bleed into another.

Auth Bypass: Using shared identity attributes rather than user-specific registries allowed cross-user token reuse. All OAuth tokens and associated identities must be tracked and isolated strictly per session.

Auth Bypass: String mismatch vulnerabilities in issuer and audience validations could bypass token verification checks due to trailing slashes. Canonical normalization of comparison targets is required before validation.