Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
smallcloudai/refact
main @ 27f86de
111
Fixes
0
CVEs
HIGH
Peak severity
20.0%
Coverage
Highlights
Path Traversal: 36 prior fixes. Scrutinize any change in this area.
refact-agent/engine/src/chat/trajectories.rs: most-fixed (6 issues). Treat as high-risk during review.
49 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: The trajectory storage and retrieval system suffered multiple vulnerabilities where malicious chat or file paths allowed reading, writing, or listing files outside designated boundaries. Fixes required symlink validation and checking real directories using dunce path simplification.
Auth Bypass: The process execution registry lacked strict ownership mapping, allowing processes owned by one chat session to be read, manipulated, or terminated from an unauthorized sibling chat boundary.
Command Injection: Spawning command interpreters like 'sh' without validating and parsing the user-provided arguments into a structured argument vector (argv) permitted arbitrary shell command execution.