Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

m0n0x41d/haft

              main @ 5abf6fe
            

Fixes

CVEs

HIGH

Peak severity

57.1%

Coverage

Highlights

Auth Bypass: 4 prior fixes. Scrutinize any change in this area.

OpenSleigh.Agent.ToolRuntime: most-fixed (1 issue). Treat as high-risk during review.

6 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: A loose default-allow mechanism in tool execution decisions allowed unauthorized tools to run if the decision status was not explicitly set to 'denied'. Fail-closed logic must be strictly implemented for all authorization gates.

Auth Bypass: Dynamic tools could mutate the filesystem outside authorized boundaries due to missing pre-execution scope checks, undermining the isolation of the agent runtime.

Path Traversal: Missing path canonicalization allowed directory traversal using relative path sequences in commands and skills endpoints to read arbitrary files.