Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

paca-ai/paca

              master @ 6d6cf12
            

Fixes

CVEs

HIGH

Peak severity

60.0%

Coverage

Highlights

Auth Bypass: 14 prior fixes. Scrutinize any change in this area.

services/api/internal/platform/plugin/runtime.go: most-fixed (3 issues). Treat as high-risk during review.

15 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The AI agent communication endpoint was vulnerable to unauthenticated access because of a missing authorization decorator and a fallback option that skipped API key validation when the configuration was blank. Developers must ensure internal endpoints enforce explicit key validations without fallback pathways.

Auth Bypass: The plugin execution runtime trusted user-supplied actor and project identifiers directly in database writes instead of deriving them from the authenticated session context, risking cross-tenant data pollution.

SSRF: Unrestricted URL resolution when fetching plugins allows remote resources to pivot into private/loopback networks. Ensuring strict HTTPS-only enforcement and DNS resolution filters on all outbound requests is critical.