Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

remix-project-org/remix-project

              master @ 9bad1df
            

Fixes

CVEs

HIGH

Peak severity

25.0%

Coverage

Highlights

Auth Bypass: 12 prior fixes. Scrutinize any change in this area.

libs/remix-ai-core/src/remix-mcp-server/RemixMCPServer.ts: most-fixed (3 issues). Treat as high-risk during review.

11 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Sensitive plugin calls were historically validated against persistent global permissions instead of session-specific configurations, risking authorization bypasses across sessions. Permissions are now isolated in-memory for sensitive workflows.

Auth Bypass: Missing or incorrectly resolved permission checks allowed AI subagents and MCP tools to modify workspace files without explicit user confirmation. Recent fixes enforce strict checkPermissions workflows and dialog-based write approvals.

Auth Bypass: Older implementations of permission handlers could be bypassed because permissions were not bound to the caller's cryptographic hash, allowing malicious plugins with the same display name to inherit unauthorized trust.