Skip to content

Kodiqa Agent

v3.4.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo AI Agents & Assistants
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

ai-coding-agent claude cli coding-assistant developer-tools ollama
+2 more
openai python

Affected surfaces

rce_ssrf auth

ReleasePort's take

Moderate signal
editorial:auto 1mo

Release v3.4.0 fixes a command‑injection vulnerability in `git_diff` that permitted remote code execution via prompt injection.

Why it matters: The patch eliminates a critical RCE risk (severity 95) for any deployment using `git_diff`; upgrade to v3.4.0 immediately if the tool is in use.

Summary

AI summary

Fixed command injection vulnerability that allowed remote code execution via prompt injection in git_diff.

Changes in this release

Security Critical

Fixes command injection vulnerability in `git_diff` via shell=True.

Fixes command injection vulnerability in `git_diff` via shell=True.

Source: llm_adapter@2026-06-07

Confidence: high

 —
Security High

Fixes world‑readable API keys in `~/.kodiqa/settings.json` by setting 0600 permissions.

Fixes world‑readable API keys in `~/.kodiqa/settings.json` by setting 0600 permissions.

Source: llm_adapter@2026-06-07

Confidence: high

 —
Feature Low

Adds `--no-update` CLI flag and `check_updates`/`update_check_interval_hours` config options for non‑blocking startup.

Adds `--no-update` CLI flag and `check_updates`/`update_check_interval_hours` config options for non‑blocking startup.

Source: llm_adapter@2026-06-07

Confidence: high

 —
Feature Low

Adds `ruff` linting and CI lint step with dead‑code/unused‑import cleanup.

Adds `ruff` linting and CI lint step with dead‑code/unused‑import cleanup.

Source: llm_adapter@2026-06-07

Confidence: high

 —
Feature Low

Adds regression tests for git_diff injection and auto‑compact fixes (290 total).

Adds regression tests for git_diff injection and auto‑compact fixes (290 total).

Source: llm_adapter@2026-06-07

Confidence: high

 —
Bugfix High

Fixes auto‑compact death spiral by using recent request prompt size and resetting after compaction.

Fixes auto‑compact death spiral by using recent request prompt size and resetting after compaction.

Source: llm_adapter@2026-06-07

Confidence: high

 —
Bugfix Medium

Fixes unbounded agentic loops by enforcing `max_iterations` (default 15, configurable).

Fixes unbounded agentic loops by enforcing `max_iterations` (default 15, configurable).

Source: llm_adapter@2026-06-07

Confidence: high

 —
Bugfix Medium

Fixes `/team` crash caused by missing `re` import.

Fixes `/team` crash caused by missing `re` import.

Source: llm_adapter@2026-06-07

Confidence: high

 —
Full changelog

A full-codebase audit fix batch.

Fixed

  • Auto-compact death spiral — _estimate_tokens used the cumulative lifetime input-token sum, so after enough turns auto-compact fired on every message, repeatedly nuking the conversation. Now uses the most recent request's prompt size and resets after compaction.
  • Command injection in git_diff — the auto-approved tool interpolated args into a shell=True string (RCE via prompt injection). Now runs git diff via argv with shlex, no shell.
  • /team crashed with NameError — re was used but never imported at module level.
  • Unbounded agentic loops — max_iterations was defined but never enforced; now capped (default 15, configurable).
  • API keys world-readable — ~/.kodiqa/settings.json now written with 0600 perms (dir 0700).

Changed

  • Non-blocking startup — the model update/discovery check (which ran ollama pull on every installed model + scraped ollama.com every launch) is throttled to once per update_check_interval_hours (default 24) and skippable via --no-update / check_updates: false.

Added

  • --no-update CLI flag; check_updates / update_check_interval_hours config options.
  • ruff linting + CI lint step; dead-code/unused-import cleanup.
  • Regression tests for the git_diff-injection and auto-compact fixes (290 tests total).

Security Fixes

  • CVE‑2025‑XXXXX — Command injection in `git_diff` via shell=True allowed arbitrary code execution; fixed by using argv with shlex.
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Kodiqa Agent

Get notified when new releases ship.

Sign up free

About Kodiqa Agent

All releases →

Related context

Beta — feedback welcome: [email protected]