Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
myshell-ai/ailice
master @ 63a2210
5
Fixes
0
CVEs
HIGH
Peak severity
Highlights
Denial of Service: 3 prior fixes. Scrutinize any change in this area.
AScripter.py: most-fixed (1 issue). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Sandbox Escape: Untrusted generated code was executed directly on the host system, allowing complete system compromise. The fix enforces execution within isolated Docker containers by default, requiring explicit opt-in for local execution.
Auth Bypass: RPC services created for generated modules bound to all network interfaces (0.0.0.0) by default, exposing internal execution capabilities to the network without authentication. The system now restricts binding to localhost (127.0.0.1) by default.
Denial of Service: Unbounded LLM generation could exhaust tokens and computational resources. This was mitigated by introducing a gas-tank and token consumption tracking mechanism to abort runaways.