Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
microsoft/vscode
main @ 53b86cf
168
Fixes
27
CVEs
CRITICAL
Peak severity
22.2%
Coverage
Highlights
Auth Bypass: 52 prior fixes. Scrutinize any change in this area.
Service: most-fixed (5 issues). Treat as high-risk during review.
59 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Eagerly spawning local or remote agent-host sessions without validating workspace trust allows arbitrary code execution or tool access in completely untrusted directories on startup. This required implementing strict workspace trust checks preceding background session initialization.
Sandbox Escape: Exposing powerful Node.js modules or global wrappers within sandboxed renderers compromises Electron's process-isolation boundaries. Removing these globally exposed modules was critical to preventing compromised renderers from escalating privileges on the host system.
Path Traversal: Command execution and file-write analyzers are prone to path traversal bypasses using shell-expansion characters like tildes and percent signs, as well as symlink resolution loopholes. Proper path canonicalization, prefix verification, and character blacklisting are required to secure these automatic write redirection gates.