Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
sheeki03/tirith
main @ 637c41c
162
Fixes
0
CVEs
HIGH
Peak severity
48.5%
Coverage
Highlights
Auth Bypass: 91 prior fixes. Scrutinize any change in this area.
crates/tirith-core/src/engine.rs: most-fixed (41 issues). Treat as high-risk during review.
103 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: The parsing logic for the TIRITH=0 inline bypass environment variable has been repeatedly bypassed via partial matching, command wrapper flags, and unhandled shell token boundaries (such as a single '&' background operator). This allowed malicious payloads to completely evade security analysis.
Sandbox Escape: Attackers frequently bypassed command-blocking filters by prepending environment variable assignments (e.g. VAR=val command) or invalid variable names to command lines. This confused the tokenizer, hiding forbidden command names from down-stream validation.
Path Traversal: The restore and validation mechanisms in the checkpoint subsystem lacked canonicalization and prefix validation. This permitted arbitrary file write vulnerabilities during checkpoint restoration by crafting malicious, relative, or directory-traversing checkpoint paths.