Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

mickael-kerjean/filestash

              master @ 1962054
            

Fixes

CVEs

CRITICAL

Peak severity

37.5%

Coverage

Highlights

Auth Bypass: 16 prior fixes. Scrutinize any change in this area.

server/ctrl/session.go: most-fixed (5 issues). Treat as high-risk during review.

22 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Session decryption failures and empty session extractions historically allowed requests to proceed with an unauthorized or default session instead of immediately terminating with a 401 Unauthorized response. This represents a foundational flaw in access control middleware.

Path Traversal: Path manipulation operations, such as directory canonicalization and ZIP archive extraction, frequently lacked prefix checks or chroot boundary validation, risking arbitrary directory reads and writes.

Auth Bypass: The NFS backend implementation suffered from critical authorization bugs, including hardcoded fallback UIDs/GIDs (using UID 1000 instead of user context) and ignoring secondary/supplementary group IDs during checks.