Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
moltis-org/moltis
main @ 48c9a41
139
Fixes
0
CVEs
HIGH
Peak severity
21.9%
Coverage
Highlights
Auth Bypass: 54 prior fixes. Scrutinize any change in this area.
crates/gateway/src/server.rs: most-fixed (8 issues). Treat as high-risk during review.
67 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Sandbox Escape: Session and cron policies could be overridden by agent-scoped configurations, allowing untrusted code to run directly on the host rather than in a sandbox container.
Auth Bypass: Unconfigured server instances could be claimed and hijacked by remote attackers during setup before an owner password was set. This required the introduction of a terminal-printed 6-digit setup code.
Path Traversal: Resolving guest paths to host paths incorrectly stripped the dynamic guest-visible host prefix instead of the constant sandbox directory, exposing host directories.