Search results

Path-containment prefix guard applied inconsistently — serve_workspace_file and workspace seed writer omit the os.sep boundary check present in the write/delete endpoints

Status: Open.

#136 In openswarm-ai/openswarm;

· rajarshidattapy opened on Jul 20, 2026

Path-containment checks in Output file endpoints use os.path.normpath instead of realpath — symlinks escape the workspace (read/write/delete)

Status: Open.

#135 In openswarm-ai/openswarm;

· rajarshidattapy opened on Jul 20, 2026

Sandbox escape in Output backend-code executor: sys.modules[...] bypasses the AST allowlist → arbitrary file R/W and RCE (regression of the #30 fix)

Status: Open.

#134 In openswarm-ai/openswarm;

· rajarshidattapy opened on Jul 20, 2026

security: fix View preview iframe — drop allow-same-origin for LLM-generated content

bugSomething isn't workingSomething isn't working

Status: Open.

#48 In openswarm-ai/openswarm;

· anushkrishnav opened on May 28, 2026

Security: redact secret fields from GET /api/settings — never return raw API keys or bearer token

bugSomething isn't workingSomething isn't working

Status: Open.

#46 In openswarm-ai/openswarm;

· anushkrishnav opened on May 28, 2026

Efficiency Issue: Agent consumes 36k tokens on first message

help wantedExtra attention is neededExtra attention is needed

Status: Open.

#26 In openswarm-ai/openswarm;

· ZeroIDdev opened on May 8, 2026