Issues - metona-ai-desktop - Gitea: Git with a cup of tea

MetonaTeam/metona-ai-desktop

Labels Milestones New Issue

[P1/高] BrowserWindowManager evaluate 执行任意 JS 无沙箱隔离 ???????????

opened 2026-07-21 21:56:11 +08:00 by thzxx

[P1/高] FileEditorTool regex 模式存在 ReDoS 风险，可被恶意输入攻击 ???????????

opened 2026-07-21 21:56:09 +08:00 by thzxx

[P1/高] CodeSearchTool ripgrep pattern 未转义，可注入命令行选项 ???????????

opened 2026-07-21 21:55:50 +08:00 by thzxx

[P1/高] SearchFilesTool walkDir 递归无深度限制，可触发栈溢出或长时间阻塞 ???????

opened 2026-07-21 21:55:49 +08:00 by thzxx

[P1/高] DeleteFileTool TOCTOU 竞态，存在检查与删除之间可被替换 ???????????

opened 2026-07-21 21:55:49 +08:00 by thzxx

[P1/高] GitDiffTool pathspec 未校验工作空间内，可读取任意仓库差异 ???????????

opened 2026-07-21 21:55:48 +08:00 by thzxx

[P1/高] PolicyEngine JSON.stringify 后正则匹配易被绕过 ???????????

opened 2026-07-21 21:55:44 +08:00 by thzxx

[P1/高] Sandbox scanCode 漏掉 require('fs') 和动态 import，可绕过沙箱 ???????????

opened 2026-07-21 21:55:43 +08:00 by thzxx

[P1/高] ToolRegistry timeoutMs 为 undefined 时导致 0ms 立即触发超时 ???????

opened 2026-07-21 21:55:42 +08:00 by thzxx

[P1/高] ToolRegistry 工具超时后 Promise 未取消，导致资源泄漏 ???????

opened 2026-07-21 21:55:41 +08:00 by thzxx

[P0/严重] HttpRequestTool 未防御 SSRF，可访问内网与云元数据服务 ????????????

opened 2026-07-21 21:55:41 +08:00 by thzxx

[P0/严重] RunCommandTool env 透传 process.env，子进程可读取所有 API keys ????????????

opened 2026-07-21 21:55:40 +08:00 by thzxx

[P0/严重] RunCommandTool 仍使用 exec 而非 execFile，违反硬性约束 ????????????

opened 2026-07-21 21:55:39 +08:00 by thzxx