Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
microsoft/agent-framework
main @ 336a19f
39
Fixes
0
CVEs
CRITICAL
Peak severity
34.2%
Coverage
Highlights
Auth Bypass: 12 prior fixes. Scrutinize any change in this area.
Microsoft.Agents.AI.Foundry.Hosting: most-fixed (2 issues). Treat as high-risk during review.
31 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: Code-execution tools that extract or capture output files are highly susceptible to symlink attacks and path traversal, potentially exposing or overwriting host files. Strict stat-based checks and canonicalization must guard these write boundaries.
Auth Bypass: Without explicit user or tenant boundary validation, in-memory session stores and hosting providers allow cross-user session leakage, allowing unauthorized access or control of agents.
Insecure Deserialization: Deserializing session checkpoints via raw pickle.loads allows arbitrary code execution. These paths must be restricted using safe type allowlists or alternate serialization formats.