Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

nvidia-nemo/guardrails

              develop @ 93714d9
            

Fixes

CVEs

CRITICAL

Peak severity

75.0%

Coverage

Highlights

Path Traversal: 3 prior fixes. Scrutinize any change in this area.

nemoguardrails/server/api.py: most-fixed (3 issues). Treat as high-risk during review.

4 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Repeated failures in path canonicalization allowed attackers to escape the configured base directory while loading rail configurations using dangerous characters and relative traversals. This vulnerability class accounted for three separate high-severity patches.

Sandbox Escape: The use of a default Jinja2 Environment for template rendering opened the system to arbitrary Python code execution via template injection. This was resolved by forcing the use of SandboxedEnvironment.

Information Disclosure: Internal safety check and reasoning traces could persist and leak to subsequent user sessions. Explicit state clearing on every LLM call was required to prevent cross-session metadata leakage.