Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

narcooo/inkos

              master @ a6ae833
            

Fixes

CVEs

HIGH

Peak severity

44.4%

Coverage

Highlights

Path Traversal: 6 prior fixes. Scrutinize any change in this area.

packages/core/src/agent/agent-session.ts: most-fixed (4 issues). Treat as high-risk during review.

6 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: The studio server has experienced recurring path traversal bugs across multiple endpoints, exposing local files to unauthorized read operations when resolving project or run-related paths without canonicalization validation.

Auth Bypass: Weaknesses in the session cache state management allowed cross-book data exposure and unauthorized access because agent instances remained cached or unisolated across distinct sessions or book transitions.

Path Traversal: Agent session tooling exposed system-level read capabilities to path traversal exploits, requiring strict file path canonicalization and disabling dangerous system-level file-read defaults.