Improper Link Resolution in phi Allows Workspace Bypass via Symlink Exploitation

Executive Summary

This vulnerability exists in phi versions 0.1.1 through 0.28.4 due to improper link resolution. The permission gate uses lexical path checks without resolving symlinks, while underlying tools follow symlinks. Attackers can include symlinks in malicious repositories that bypass workspace restrictions, allowing unauthorized file reads or writes outside the intended workspace.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, inspect phi installations for versions 0.1.1 through 0.28.4. Check for symlinks in repositories that point outside the workspace. Review file write operations for unexpected external writes or prompt injection attempts. Use commands like 'phi version' to verify version and 'find /path/to/workspace -type l' to locate symlinks.

Useful 0 Not Useful 0

Impact Analysis

An attacker could trick the system into reading sensitive files like SSH keys or writing malicious content to arbitrary system locations. This could lead to secret leakage, system compromise, or unauthorized file modifications without user approval.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade phi to a version beyond 0.28.4 where the symlink resolution issue is fixed. Disable headless runs without approval checks. Review and restrict workspace permissions. Monitor file write operations for suspicious paths. Apply patches from the phi repository addressing CWE-59.

Useful 0 Not Useful 0