Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

mage-ai/mage-ai

              master @ e8190f8
            

Fixes

CVEs

CRITICAL

Peak severity

33.3%

Coverage

Highlights

Auth Bypass: 40 prior fixes. Scrutinize any change in this area.

mage_ai/server/terminal_server.py: most-fixed (5 issues). Treat as high-risk during review.

40 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The terminal WebSocket server allowed unauthorized access and command execution via unauthenticated connections, failing to correctly validate WebSocket messages against active, undeleted user sessions. Attackers could interact with terminals without proper editor credentials.

Path Traversal: Path traversal vulnerabilities across the base API handler and files API allowed remote viewers to access arbitrary files outside the repository root. This occurred through unvalidated subpath routing and lack of path prefix checks on canonicalized file paths.

Command Injection: Insecure subcommand execution using shell interpolation within Git key scanning and ECS/Cloud Run task execution allowed attackers to inject shell metacharacters and run arbitrary code on the underlying container hosts.