Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
reworkd/agentgpt
main @ 18b073a
7
Fixes
0
CVEs
HIGH
Peak severity
16.7%
Coverage
Highlights
Auth Bypass: 5 prior fixes. Scrutinize any change in this area.
next/src/hooks/useAuth.ts: most-fixed (1 issue). Treat as high-risk during review.
4 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Weaknesses in handling token decryption exceptions (like InvalidToken) can lead to authentication bypasses if unhandled errors allow processing of malformed payloads. It is critical to enforce explicit HTTP Forbidden overrides when decryption fails.
Auth Bypass: Insecure identifier extraction during database lookups allows unauthorized organization data retrieval. Identity parameter extraction must be validated strictly against authenticated session context.
Insecure Storage: Storing plain text or weakly protected OAuth access tokens in the database compromises third-party user data. Ensure symmetric encryption (e.g. Fernet) is applied to all sensitive database credentials.