Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

timescale/pgai

              main @ 47d74af
            

Fixes

CVEs

CRITICAL

Peak severity

Highlights

Auth Bypass: 5 prior fixes. Scrutinize any change in this area.

projects/extension/ai/secrets.py: most-fixed (2 issues). Treat as high-risk during review.

7 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

SQL Injection: Search path hijacking via unqualified types, operators, and functions inside database scripts allows attackers to execute arbitrary code during execution of extension code.

Auth Bypass: Retrieving secrets directly from the environment or database without explicitly enforcing permission validation on the active session role bypasses security restrictions.

Privilege Escalation: Improperly configured execution privileges, lack of explicit SECURITY DEFINER markings, or default public grants allow lower-privilege users to trigger elevated vectorizer and database tasks.