Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

metatool-ai/metamcp

              ai-dev @ ff4ff2d
            

Fixes

CVEs

HIGH

Peak severity

73.7%

Coverage

Highlights

Auth Bypass: 7 prior fixes. Scrutinize any change in this area.

apps/backend/src/lib/metamcp/header-forwarding.ts: most-fixed (3 issues). Treat as high-risk during review.

7 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Lack of strict user-ownership validation on API keys and OAuth tokens previously allowed authenticated users to access private endpoints belonging to other users. Developers must enforce tenant/user boundaries on every validated session.

Denial of Service: Rapid execution of failing STDIO commands or fast creation of transports causes immediate resource exhaustion by spawning cascading subprocesses. Cooldown rate limits per parameter hash and process status must be strictly enforced.

HTTP Request Smuggling: Unsanitized client-supplied headers containing null bytes or CRLF sequences allowed HTTP response splitting and request smuggling. Strict output sanitization and header-name deny-lists are required when forwarding parameters.