Issues - metona-ai-desktop - Gitea: Git with a cup of tea

MetonaTeam/metona-ai-desktop

Labels Milestones New Issue

[P1/高] BrowserWindowManager evaluate 执行任意 JS 无沙箱隔离 ???????????

by thzxx was closed 2026-07-22 09:43:28 +08:00

[P1/高] FileEditorTool regex 模式存在 ReDoS 风险，可被恶意输入攻击 ???????????

by thzxx was closed 2026-07-22 09:43:27 +08:00

[P1/高] CodeSearchTool ripgrep pattern 未转义，可注入命令行选项 ???????????

by thzxx was closed 2026-07-22 09:42:56 +08:00

[P1/高] SearchFilesTool walkDir 递归无深度限制，可触发栈溢出或长时间阻塞 ???????

by thzxx was closed 2026-07-22 09:42:55 +08:00

[P1/高] DeleteFileTool TOCTOU 竞态，存在检查与删除之间可被替换 ???????????

by thzxx was closed 2026-07-22 09:42:53 +08:00

[P1/高] GitDiffTool pathspec 未校验工作空间内，可读取任意仓库差异 ???????????

by thzxx was closed 2026-07-22 09:42:52 +08:00

[P1/高] PolicyEngine JSON.stringify 后正则匹配易被绕过 ???????????

by thzxx was closed 2026-07-22 09:42:45 +08:00

[P1/高] Sandbox scanCode 漏掉 require('fs') 和动态 import，可绕过沙箱 ???????????

by thzxx was closed 2026-07-22 09:42:44 +08:00

[P1/高] ToolRegistry timeoutMs 为 undefined 时导致 0ms 立即触发超时 ???????

by thzxx was closed 2026-07-22 09:42:42 +08:00

[P1/高] ToolRegistry 工具超时后 Promise 未取消，导致资源泄漏 ???????

by thzxx was closed 2026-07-22 09:42:41 +08:00

[P0/严重] HttpRequestTool 未防御 SSRF，可访问内网与云元数据服务 ????????????

by thzxx was closed 2026-07-22 09:24:46 +08:00

[P0/严重] RunCommandTool env 透传 process.env，子进程可读取所有 API keys ????????????

by thzxx was closed 2026-07-22 09:24:44 +08:00

[P0/严重] RunCommandTool 仍使用 exec 而非 execFile，违反硬性约束 ????????????

by thzxx was closed 2026-07-22 09:14:54 +08:00