Chameleon

v2.33.2 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Developer Productivity

✓ No known CVEs patched

This release patches 1 known CVE

Topics

ai-coding-assistant archetype ast-analysis claude-code claude-plugin code-conventions

+12 more

code-review code-style developer-tools javascript linter mcp mcp-server prompt-engineering python ruby rails typescript

Affected surfaces

auth rce_ssrf

Summary

AI summary

Fixed PreToolUse trusting a stale daemon no_repo result that could bypass security checks.

Full changelog

PreToolUse no longer trusts a stale daemon no_repo result. The daemon
fast-path discards a degraded daemon verdict (profile_corrupted,
profile_unsupported_schema_version, no_profile) and re-checks in-process,
but no_repo was missing from that set. Because the daemon socket is keyed by
version and code fingerprint (not by session) and the daemon's environment is
frozen at spawn, a daemon spawned in a divergent environment could return
no_repo for a path the in-process path resolves to a real, trusted profile.
The hook then trusted that negative and silently skipped BOTH archetype
injection AND the enforcement deny — a credential or eval( that should have
been blocked could reach disk. no_repo now triggers the same in-process
fallback, restoring the daemon to a pure latency layer. posttool_verify was
unaffected (it resolves the repo root in-process before consulting the daemon).