Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

tencent/ai-infra-guard

              main @ fdbe8d8
            

Fixes

CVEs

CRITICAL

Peak severity

50.0%

Coverage

Highlights

Path Traversal: 7 prior fixes. Scrutinize any change in this area.

common/websocket/knowledge2_api.go: most-fixed (3 issues). Treat as high-risk during review.

12 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Unvalidated file names and directory parameters enabled arbitrary file reading and directory traversal outside the intended configuration paths. Developers must enforce strict canonicalization and prefix validation using safeJoinPath.

Sandbox Escape: Disabling the Chromium sandbox using the '--no-sandbox' flag and launching processes as a root user allowed container escapes. Hardening requires running as a non-root user and explicitly ensuring the Chromium SUID sandbox is active.

Command Injection: Execution of git commands using unvalidated git ref parameters allowed arbitrary command injection. Strict regular expression whitelisting must gate all system call parameters.