Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

openmined/pysyft

              dev @ 8dfaabf
            

160

Fixes

CVEs

CRITICAL

Peak severity

Highlights

Auth Bypass: 103 prior fixes. Scrutinize any change in this area.

packages/syft/src/syft/core/node/common/permissions/user_permissions.py: most-fixed (5 issues). Treat as high-risk during review.

129 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Remote Code Execution: The application historically evaluated serialized bytecode expressions without class-type gating or sanitization, leading to critical remote code execution risks (tracked as CVE-2026-31220).

Auth Bypass: Insecure default error handling and inverted logical checks in JWT verification routinely bypassed authentication blocks, yielding unauthenticated administrative access.

Insecure Deserialization: Dynamic and arbitrary type lookup using pydoc.locate or pickle.loads allowed remote attackers to execute arbitrary system commands during payload deserialization.