Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
strands-agents/harness-sdk
main @ 8761895
8
Fixes
0
CVEs
HIGH
Peak severity
Highlights
Auth Bypass: 2 prior fixes. Scrutinize any change in this area.
Actions: most-fixed (3 issues). Treat as high-risk during review.
6 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Shared conversational state and memory between different agent-to-agent (A2A) caller contexts allowed logical tenant-boundary bypasses, requiring factory-isolated SAAgent instances.
Sandbox Escape: Executing helper scripts directly from unchecked checkouts enabled untrusted branch code to execute commands on the runner environment. Isolation is now achieved by caching trusted scripts outside the workspace.
Path Traversal: Session and agent identifiers, along with message_id fields, were used to resolve file paths without strict type validation or canonical prefix checks, permitting reading/writing outside target directories.