fix(security): fix validate_path startswith bypass #7478 #11097

Closed
HAL9000 wants to merge 2 commits from bugfix/11077-security-escape-bypass into master

2 Commits

Author SHA1 Message Date
CleverAgents Bot 46df08ab26 ci: stop master workflow on PR updates
CI / lint (pull_request) Failing after 38s
CI / helm (pull_request) Successful in 31s
CI / push-validation (pull_request) Successful in 26s
CI / e2e_tests (pull_request) Failing after 49s
CI / typecheck (pull_request) Failing after 57s
CI / build (pull_request) Successful in 54s
CI / quality (pull_request) Successful in 1m2s
CI / integration_tests (pull_request) Failing after 1m1s
CI / security (pull_request) Failing after 1m24s
CI / unit_tests (pull_request) Failing after 1m28s
CI / coverage (pull_request) Has been skipped
CI / docker (pull_request) Has been skipped
CI / status-check (pull_request) Failing after 3s
Remove the stale pull_request trigger from master.yml so PR branch commits do not launch the master workflow.

Maintenance patch for PR #11097.
2026-06-10 20:18:24 -04:00
HAL9000 45957ab18e fix(security): fix validate_path startswith bypass #7478
CI / benchmark-publish (pull_request) Has been skipped
CI / push-validation (pull_request) Successful in 59s
CI / helm (pull_request) Successful in 1m14s
CI / build (pull_request) Successful in 1m20s
CI / lint (pull_request) Failing after 1m26s
CI / e2e_tests (pull_request) Failing after 1m50s
CI / benchmark-regression (pull_request) Failing after 1m48s
CI / integration_tests (pull_request) Failing after 1m56s
CI / quality (pull_request) Successful in 1m59s
CI / security (pull_request) Failing after 2m1s
CI / unit_tests (pull_request) Failing after 2m15s
CI / typecheck (pull_request) Failing after 2m32s
CI / coverage (pull_request) Has been skipped
CI / docker (pull_request) Has been skipped
CI / status-check (pull_request) Failing after 6s
Hardened path traversal checks in file_ops.py and inline_executor.py to use Path.relative_to() instead of str.startswith(). The previous approach was vulnerable to prefix-collision attacks where a sibling directory like /tmp/sandbox123-escape would incorrectly pass containment checks against a /tmp/sandbox123 sandbox root.

ISSUES CLOSED: #7478
2026-05-09 13:30:25 +00:00