Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-08 · source-backed
v1.38.0 and v2.6.3, both August 7, port "prevent continuation forgery in tool confirmation," now validating that a confirmed target tool is registered in the executing agent's tools_dict, that it genuinely requires confirmation, and that the original tool-call event exists in session history with matching ID, name and arguments. PR #6597 removes shell execution from ReadFileTool ranged reads. Two frameworks, same week, same root cause: approvals checked against model-supplied identifiers instead of server-held state.
Each link below shares sources, entities, or timing with this story.
Shared entity: August / Same source domain / Shared topic / Earlier coverage
Both cover August; reported by the same outlet (github.com); overlapping topics (against, agent, approval, argument, tool).
Shared entity: August / Same source domain / Shared topic
Both cover August; reported by the same outlet (github.com); overlapping topics (against, approval, argument, august, tool).
Shared entity: August / Same source domain / Shared topic / Earlier coverage
Both cover August; reported by the same outlet (github.com); overlapping topics (against, agent, argument, august).
Shared entity: August / Same source domain / Shared topic
Both cover August; reported by the same outlet (github.com); overlapping topics (agent, august, same, tool).
Shared entity: August / Same source domain / Shared topic / Earlier coverage
Both cover August; reported by the same outlet (github.com); overlapping topics (against, agent, august).
Both cover August; reported by the same outlet (github.com); overlapping topics (against, agent, same).
Both cover August; reported by the same outlet (github.com); overlapping topics (agent, approval, august).
Both cover August; reported by the same outlet (github.com); overlapping topics (agent, august, checked).