Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
microsoft/autogen
main @ 027ecf0
11
Fixes
1
CVEs
HIGH
Peak severity
27.3%
Coverage
Highlights
Command Injection: 2 prior fixes. Scrutinize any change in this area.
autogen/coding/local_commandline_code_executor.py: most-fixed (2 issues). Treat as high-risk during review.
7 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Remote Code Execution: Instantiating arbitrary components like FunctionTool during routine schema validation executes untrusted Python code. Developers must skip actual instantiation and side-effects during structural validation.
Sandbox Escape: Executing user or LLM-generated code locally on the host environment can lead to total system compromise. Defaulting execution environments to isolated Docker containers is critical.
Path Traversal: Allowing code executors to write or read files outside the designated workspace using uncanonicalized paths enables attackers to overwrite system files or steal sensitive data.