Agent Framework

v0.6.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 15d AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

ai ai-agents anthropic deno docker llm

+1 more

openai

Affected surfaces

rbac

ReleasePort's take

Moderate signal

editorial:auto 10d

The v0.6.0 release fixes a run‑allowlist bypass via background `&` and introduces a new permission security suite.

Why it matters: Addressing the allowlist bypass (severity 90) prevents unauthorized command execution; all users should upgrade immediately.

Summary

AI summary

Updates feat, cli, and config across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Security	Critical	Fixes run-allowlist bypass via background `&` and adds permission security suite. Fixes run-allowlist bypass via background `&` and adds permission security suite. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature
Feature	Medium	Adds --version/-v flag to the af CLI. Adds --version/-v flag to the af CLI. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Medium	Allows the CLI to run Deno scripts. Allows the CLI to run Deno scripts. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Medium	Distributes af via Homebrew with compiled binaries, version command, and docs. Distributes af via Homebrew with compiled binaries, version command, and docs. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Medium	Adds email triggers with Resend, IMAP, Gmail, and Outlook transports (Plan 7). Adds email triggers with Resend, IMAP, Gmail, and Outlook transports (Plan 7). Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Medium	Introduces Plan 13 phase 1: per‑conversation ordering and bounded concurrency. Introduces Plan 13 phase 1: per‑conversation ordering and bounded concurrency. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Medium	Adds slash commands with built‑ins, config‑defined commands, and native channel registration (Plan 10). Adds slash commands with built‑ins, config‑defined commands, and native channel registration (Plan 10). Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Medium	Adds /compact, auto‑compaction, and /new built‑ins for history maintenance. Adds /compact, auto‑compaction, and /new built‑ins for history maintenance. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Medium	Adds agent‑created schedules for reminders and recurring runs via native tools. Adds agent‑created schedules for reminders and recurring runs via native tools. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	Fixes codex provider output reconstruction when response.completed is empty. Fixes codex provider output reconstruction when response.completed is empty. Source: llm_adapter@2026-07-16 Confidence: high	—

Full changelog

What's Changed

Plans 7-13: email, multi-agent, evals, slash commands, footprint, channels, concurrency by @RatulMaharaj in https://github.com/loopedautomation/agent-framework/pull/64
Expand gh-issues skill and pin gh CLI version in example image by @RatulMaharaj in https://github.com/loopedautomation/agent-framework/pull/65
Fix run-allowlist bypass via background &; add permission security suite by @RatulMaharaj in https://github.com/loopedautomation/agent-framework/pull/66
Add codex provider: run agents on a ChatGPT subscription by @RatulMaharaj in https://github.com/loopedautomation/agent-framework/pull/67
docs: rewrite README in the Looped voice, add alpha-software note by @RatulMaharaj in https://github.com/loopedautomation/agent-framework/pull/76
feat(cli): add --version/-v flag to af by @yashay16s-oss in https://github.com/loopedautomation/agent-framework/pull/75
Allow the CLI to run deno by @HappyDevs1 in https://github.com/loopedautomation/agent-framework/pull/81
docs: add a contributing guide by @HappyDevs1 in https://github.com/loopedautomation/agent-framework/pull/82
docs: align framework description with marketing site one-liner by @yashay16s-oss in https://github.com/loopedautomation/agent-framework/pull/78
feat(config): allow uppercase characters in handle by @yashay16s-oss in https://github.com/loopedautomation/agent-framework/pull/83
feat: distribute af via Homebrew — compiled binaries, version cmd, docs by @gtchax in https://github.com/loopedautomation/agent-framework/pull/79
feat: email triggers — Resend, IMAP, Gmail and Outlook transports (plan 7) by @RatulMaharaj in https://github.com/loopedautomation/agent-framework/pull/71
Plan 9 phase 1: the eval harness (af test) by @RatulMaharaj in https://github.com/loopedautomation/agent-framework/pull/72
feat(cli): interactive TUI for af run by @RatulMaharaj in https://github.com/loopedautomation/agent-framework/pull/110
fix(providers): reconstruct codex output when response.completed is empty by @HappyDevs1 in https://github.com/loopedautomation/agent-framework/pull/85
feat: slash commands — built-ins, config-defined commands, native channel registration (plan 10) by @RatulMaharaj in https://github.com/loopedautomation/agent-framework/pull/111
Plan 13 phase 1: per-conversation ordering and bounded concurrency by @RatulMaharaj in https://github.com/loopedautomation/agent-framework/pull/74
feat: /compact, auto-compaction and /new — history maintenance built-ins by @RatulMaharaj in https://github.com/loopedautomation/agent-framework/pull/112
docs(telegram): options table, matching the Discord page by @RatulMaharaj in https://github.com/loopedautomation/agent-framework/pull/114
feat: agent-created schedules — reminders and recurring runs via native tools by @RatulMaharaj in https://github.com/loopedautomation/agent-framework/pull/115

New Contributors

@yashay16s-oss made their first contribution in https://github.com/loopedautomation/agent-framework/pull/75
@HappyDevs1 made their first contribution in https://github.com/loopedautomation/agent-framework/pull/81
@gtchax made their first contribution in https://github.com/loopedautomation/agent-framework/pull/79

Full Changelog: https://github.com/loopedautomation/agent-framework/compare/v0.5.0...v0.6.0

Security Fixes

Fix run-allowlist bypass via background `&`; add permission security suite

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Agent Framework

Get notified when new releases ship.

About Agent Framework

All releases →

Related context

Related tools

Earlier breaking changes

v0.7.1 Removes `tools.custom`; use MCP for custom tools.