Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

tencent/weknora

              main @ 122408b
            

113

Fixes

CVEs

CRITICAL

Peak severity

45.9%

Coverage

Highlights

Auth Bypass: 36 prior fixes. Scrutinize any change in this area.

internal/router/router.go: most-fixed (8 issues). Treat as high-risk during review.

67 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

SQL Injection: The database query tool allowed attackers to execute arbitrary code or bypass tenant isolation by exploiting vulnerabilities in structured query arguments or manipulating parenthetical WHERE clauses, as represented by CVE-2026-30860 and CVE-2026-30859.

Command Injection: Improper validation of MCP stdio configuration parameters (such as the command and arguments) allowed authenticated users to execute arbitrary commands and subprocesses on the server host.

Auth Bypass: Numerous API endpoints (such as initialization, evaluation, and tenant settings) lacked proper RBAC middleware gating or failed to validate the tenant ID in URL path parameters against the authenticated user context.