Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

xerrors/yuxi

              main @ 1766529
            

Fixes

CVEs

HIGH

Peak severity

Highlights

Auth Bypass: 5 prior fixes. Scrutinize any change in this area.

backend/package/yuxi/services/viewer_filesystem_service.py: most-fixed (3 issues). Treat as high-risk during review.

18 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: The backend middleware and related routers historically failed to properly isolate users, relying on loose department configurations rather than strict user-level identifier (UID) checks and key verifications. This allowed attackers to access arbitrary agent configs and user data.

Path Traversal: The application allowed arbitrary local directory access in the viewer and sandbox workspaces because path parameters were not canonicalized against an authorized base prefix. This permitted traversal outside target workspaces.

SSRF: External resource fetching and URL-based document uploading permitted internal service exploration (SSRF). While some handlers were validated or disabled, others remained vulnerable to manipulation of parameters like health_url.