Vibe Coding
Pattern: Five Coding Agents Shipped Boundary Fixes in 48 Hours for Checks That Ran Before the Real Access
Claude Code 2.1.251 fixed a symlink swapped after the permission check and a `scriptPath` read before it; gemini-cli made workspace trust fail-closed; SiYuan's CVE-2026-82234 is DNS resolved at guard time but not at connect time; Codex 0.151.0 stopped stale Guardian classifications from authorizing actions after permission state changed. Four independent codebases, one bug class: the guard evaluated a name or a resolution that was still mutable when the access actually happened. If you write tool-permission code, the test to add is not "is this path allowed" but "is this the same object I checked".
↳ Follow the thread