Issues - metona-ai-desktop - Gitea: Git with a cup of tea

MetonaTeam/metona-ai-desktop

Labels Milestones New Issue

[P1/高] BrowserWindowManager evaluate 执行任意 JS 无沙箱隔离 ???????????

opened 2026-07-21 21:56:11 +08:00 by thzxx

[P1/高] FileEditorTool regex 模式存在 ReDoS 风险，可被恶意输入攻击 ???????????

opened 2026-07-21 21:56:09 +08:00 by thzxx

[P1/高] ConfirmationDialog autoExecute 选项未做二次确认，误点击导致永久自动执行 ???????????

opened 2026-07-21 21:56:05 +08:00 by thzxx

[P1/高] WindowManager sandbox: false 削弱渲染进程隔离 ???????????

opened 2026-07-21 21:56:02 +08:00 by thzxx

[P1/高] CodeSearchTool ripgrep pattern 未转义，可注入命令行选项 ???????????

opened 2026-07-21 21:55:50 +08:00 by thzxx

[P1/高] DeleteFileTool TOCTOU 竞态，存在检查与删除之间可被替换 ???????????

opened 2026-07-21 21:55:49 +08:00 by thzxx

[P1/高] GitDiffTool pathspec 未校验工作空间内，可读取任意仓库差异 ???????????

opened 2026-07-21 21:55:48 +08:00 by thzxx

[P1/高] PromptInjectionDefender 未检测 Unicode 同形字符与零宽字符 ???????Agent??

opened 2026-07-21 21:55:45 +08:00 by thzxx

[P1/高] PromptInjectionDefender 单词边界缺失，关键词易被绕过 ???????Agent??

opened 2026-07-21 21:55:45 +08:00 by thzxx

[P1/高] PolicyEngine JSON.stringify 后正则匹配易被绕过 ???????????

opened 2026-07-21 21:55:44 +08:00 by thzxx

[P1/高] Sandbox scanCode 漏掉 require('fs') 和动态 import，可绕过沙箱 ???????????

opened 2026-07-21 21:55:43 +08:00 by thzxx

[P0/严重] HttpRequestTool 未防御 SSRF，可访问内网与云元数据服务 ????????????

opened 2026-07-21 21:55:41 +08:00 by thzxx

[P0/严重] RunCommandTool env 透传 process.env，子进程可读取所有 API keys ????????????

opened 2026-07-21 21:55:40 +08:00 by thzxx

[P0/严重] RunCommandTool 仍使用 exec 而非 execFile，违反硬性约束 ????????????

opened 2026-07-21 21:55:39 +08:00 by thzxx

[P0/严重] preload.ts contextBridge 失败时降级到 globalThis 赋值削弱渲染进程隔离 ????????IPC??

opened 2026-07-21 21:55:38 +08:00 by thzxx

[P0/严重] MCPManager stdio 子进程命令注入风险 ????????????

opened 2026-07-21 21:55:37 +08:00 by thzxx