Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

microsoft/taskweaver

              main @ d44ddef
            

Fixes

CVEs

HIGH

Peak severity

Highlights

Privilege Escalation: 2 prior fixes. Scrutinize any change in this area.

ces_container/Dockerfile: most-fixed (1 issue). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Privilege Escalation: Running the execution container as root allows potential container escapes and complete host compromise if malicious code is executed. Non-root user configurations must be strictly enforced.

Code Injection: Unsafe generation of arguments passed to code execution sinks allows arbitrary python code injection within the interpreter. Secure serialization and code verification must restrict dynamic execution paths.

Auth Bypass: Using shared or globally scoped session objects in the web UI allows cross-session data exposure and session hijacking. Request handlers must strictly partition session states.