Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

waybarrios/vllm-mlx

              main @ 0dd1157
            

Fixes

CVEs

HIGH

Peak severity

45.5%

Coverage

Highlights

Denial of Service: 8 prior fixes. Scrutinize any change in this area.

vllm_mlx/mcp/security.py: most-fixed (5 issues). Treat as high-risk during review.

12 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Command Injection: Unrestricted command execution inside Model Context Protocol (MCP) server configurations allowed command injection via inline execution flags and special characters. Developers must use strict command validators and validate arguments thoroughly.

Sandbox Escape: Exposing raw tool execution capabilities on endpoints like /v1/mcp/execute bypasses the intended security sandboxing. Execution must always be routed through sandboxed wrappers.

Server-Side Request Forgery: Multimodal model endpoints processing remote URLs can be coerced into querying internal, loopback, or private addresses without strict destination validation.