Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
opensandbox-group/opensandbox
main @ f66d940
60
Fixes
0
CVEs
HIGH
Peak severity
38.9%
Coverage
Highlights
Denial of Service: 15 prior fixes. Scrutinize any change in this area.
components/egress: most-fixed (8 issues). Treat as high-risk during review.
20 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: Incomplete validation of host paths, PVC subpaths, and volume mounts allows symlink-based directory traversal, leading to unauthorized host filesystem access. Path validation must resolve both host paths and allowed prefixes using realpath before matching.
Auth Bypass: Egress containment is routinely bypassed due to rulesets being cleaned up during supervisor restarts or falling back to unrestrictive modes on failure instead of failing closed. Security rules must remain active and fail-closed during transient failures.
Sandbox Escape: Containers sharing network namespaces can exploit unmonitored or unrouted IPv6 channels to bypass IPv4-only egress filtering policies. Disabling IPv6 in the shared network namespace is required to prevent bypasses.