Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

steipete/oracle

              main @ 2fa6b5a
            

Fixes

CVEs

MEDIUM

Peak severity

50.0%

Coverage

Highlights

Information Disclosure: 2 prior fixes. Scrutinize any change in this area.

src/browser/actions/deepResearch.ts: most-fixed (2 issues). Treat as high-risk during review.

0 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Untrusted MCP agents can execute path traversal attacks to write files or generate images outside the designated ORACLE_HOME_DIR home directory containment zone, especially when exploiting symlinked parent directories.

Auth Bypass: Browser-wide auto-attach scopes in remote Chrome connections can lead to cross-tab session leakage during Deep Research actions, allowing session boundaries to be bypassed unless CDP commands are explicitly bound to the current page session.

Information Disclosure: A lack of strict target scoping allows browser-wide target enumeration to capture and write foreign tab session reports into the current user's Oracle session.