Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

stakpak/agent

              main @ 4e44be9
            

Fixes

CVEs

HIGH

Peak severity

39.4%

Coverage

Highlights

Denial of Service: 12 prior fixes. Scrutinize any change in this area.

libs/mcp/proxy/src/server/mod.rs: most-fixed (4 issues). Treat as high-risk during review.

17 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The Model Context Protocol (MCP) and agent control plane implementations allowed unauthenticated sessions and bypassed user permission prompts before executing sensitive filesystem operations or command execution.

Command Injection: Untrusted caller inputs such as model names, volume configurations, and tool names were directly passed to system commands without proper shell-quoting or escaping, allowing remote code execution via subagents.

Denial of Service: Unsafe raw byte-index slicing on strings containing multi-byte UTF-8 characters caused panics when processing or truncating user-controlled inputs.