Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

synkraai/aiox-core

              main @ 77265d5
            

Fixes

CVEs

HIGH

Peak severity

26.7%

Coverage

Highlights

Command Injection: 6 prior fixes. Scrutinize any change in this area.

.aios-core/core/elicitation/session-manager.js: most-fixed (1 issue). Treat as high-risk during review.

10 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Command Injection: Untrusted prompts and strings containing shell metacharacters were executed using shell runners (`sh -c`). Secure execution requires shifting to direct binary spawning with arguments passed securely via arrays or `stdin`.

Command Injection: Command execution in the AI providers and extension adapters relied on unsafe shell interpolation, permitting shell injection via dynamic payloads. Direct process execution must be enforced.

Path Traversal: The post-install phase was vulnerable to directory-to-symlink replacement attacks (TOCTOU) and path containment bypasses during file repair. Safe execution requires strict realpath containment checks and symlink validation.