Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

tauri-apps/tauri

              dev @ 469ecc8
            

Fixes

CVEs

CRITICAL

Peak severity

22.6%

Coverage

Highlights

Auth Bypass: 27 prior fixes. Scrutinize any change in this area.

core/tauri/src/manager.rs: most-fixed (12 issues). Treat as high-risk during review.

57 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Filesystem containment scoping has repeatedly been bypassed due to incomplete path canonicalization, missing trailing slash handling, symbolic links, and loose glob matching logic. System endpoints matching user-supplied paths are critical points of potential boundary escape.

Auth Bypass: Webview origin checking and IPC endpoint protection are highly sensitive surfaces. Attackers have bypassed controls via custom protocols, unvalidated request headers, and iframe manipulation to execute unauthorized IPC command payloads on the host.

Auth Bypass: Access Control Lists (ACLs) can fail when scopes are resolved globally rather than being strictly segregated per-window or per-plugin. Incorrect security contexts and parameter validation order in multiwebview architectures have directly led to privilege escalations.