cypress-io/cypress

These are source observations and explicitly marked hypotheses, not confirmed vulnerabilities. Sensitive boundaries include configuration execution, privileged browser-to-server commands, filesystem access, GraphQL listeners, and CDP session control. Transport switching and V8 snapshot composition create substantial coupling. Runtime validation and broader test results remain unknown because this investigation executed no repository code.

• Configuration/plugin execution is a host-code boundary: ProjectConfigIpc inherits most process environment and forks with the user Node, while RunPlugins calls setupNodeEvents and later invokes registered handlers.
  packages/data-context/src/data/ProjectConfigIpc.ts#L308-324packages/data-context/src/data/ProjectConfigIpc.ts#L410-416packages/server/lib/plugins/child/run_plugins.ts#L113-117packages/server/lib/plugins/child/run_plugins.ts#L181-184
• PrivilegedCommandsManager validates channel keys and command name/args for E2E requests before dispatching env, file, origin, and task operations; hasVerifiedCommand uses find() without removing the entry despite its removal comment.
  packages/server/lib/privileged-commands/privileged-commands-manager.ts#L65-96packages/server/lib/privileged-commands/privileged-commands-manager.ts#L98-117
• readFile/writeFile resolve caller paths against projectRoot without a containment check in those helpers; absolute paths or parent traversal can therefore address locations outside the project. Whether a caller is authorized depends on upstream command controls.
  packages/server/lib/files.ts#L4-20packages/server/lib/files.ts#L51-59packages/server/lib/privileged-commands/privileged-commands-manager.ts#L83-117
• Hypothesis for focused review: the Launchpad GraphQL listener supplies no explicit bind host and accepts requests without Origin; its CORS denial controls browser response visibility rather than being an authentication check. Actual reachability and exploitability were not tested. (inferred)
  packages/data-context/graphql/makeGraphQLServer.ts#L39-43packages/data-context/graphql/makeGraphQLServer.ts#L119-128packages/data-context/graphql/corsOriginDelegate.ts#L23-48
• Session probes expose live CDP URL and machine/user identity when the URL session ID matches; session identity is persisted under the cache. The project server binds loopback, and CLI probes additionally require matching identity and reachable CDP, making local record/endpoint access a sensitive boundary.
  packages/server/lib/routes.ts#L224-241packages/server/lib/cypress-sessions.ts#L45-61packages/server/lib/server-base.ts#L930-944cli/lib/cypress-sessions/liveness.ts#L50-77
• Transport switching must preserve the same stubbing-state object and publish mode/runtime consistently; server comments identify broken intercept matching and disagreement with the still-running browser as failure modes.
  packages/server/lib/server-base.ts#L434-437packages/server/lib/server-base.ts#L481-506packages/server/lib/routes.ts#L35-42
• cy.exec's server module remains imported solely for V8 snapshot composition and throws a Cypress 16 removal error; deleting this apparently obsolete stub has a documented mksnapshot failure risk.
  packages/server/lib/exec.ts#L1-6packages/server/lib/privileged-commands/privileged-commands-manager.ts#L98-105
• A successful production-build command alone does not prove type correctness: server build-prod and data-context build-prod explicitly tolerate tsc failure, while separate check-ts scripts enforce no-emit checks.
  packages/server/package.json#L7-8packages/data-context/package.json#L8-12