Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

openclaw/peekaboo

              main @ dda07c2
            

Fixes

CVEs

HIGH

Peak severity

36.4%

Coverage

Highlights

Auth Bypass: 4 prior fixes. Scrutinize any change in this area.

Core/PeekabooCore/Sources/PeekabooAgentRuntime/Agent/PeekabooAgentService+Streaming.swift: most-fixed (2 issues). Treat as high-risk during review.

5 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Prompt Injection: Untrusted context ingested from window titles or clipboard content can manipulate agent behavior. Mitigation requires encapsulating untrusted state using unique delimiter nonces and ensuring appropriate user-role message isolation rather than parsing content inside system prompts.

Auth Bypass: Insufficient target pinning during UI automation requests can allow unauthorized background control of arbitrary system processes. Automation actions must be restricted using exact process and window PID validation.

Auth Bypass: Failure to immediately validate and reject unauthorized connections on IPC interfaces can allow unauthorized local clients to process commands. Early returns and strict socket handshake validation are necessary.