Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
runmaestro/maestro
main @ 2c2503f
84
Fixes
0
CVEs
CRITICAL
Peak severity
21.6%
Coverage
Highlights
Path Traversal: 27 prior fixes. Scrutinize any change in this area.
src/main/web-server/handlers/messageHandlers.ts: most-fixed (6 issues). Treat as high-risk during review.
53 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: WebSocket message handlers handling file-retrieval, terminal setup, and file-opening operations frequently lacked robust canonicalization, permitting access outside session roots using symlinks or traversal segments.
Command Injection: SSH terminal tab creation and remote command handlers were vulnerable to command expansion and escaping when wrapping dynamic prompts or working directory overrides in shell wrappers.
Auth Bypass: Spawned Claude and Codex agents could bypass read-only/plan mode restrictions because permission-bypass parameters (such as '--dangerously-skip-permissions') were not stripped consistently when launching subprocesses.