rohitg00/agentmemory

v0.9.27 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

agentmemory agents ai claude claudecode codex

+7 more

copilot cursor genai harness hermes memory openclaw

Affected surfaces

auth breaking_upgrade

ReleasePort's take

Moderate signal

editorial:auto 1mo

The release enforces isolated agent memory scope to stop cross‑agent data leakage and adds safeguards against data loss during service restarts.

Why it matters: Enforcing AGENTMEMORY_AGENT_SCOPE=isolated on recall endpoints prevents unauthorized cross‑agent access; preventing total data loss when stopping/restarting the agent memory service averts catastrophic failures. Severity scores: security fact 90, bugfix 70.

Summary

AI summary

Updates https://github.com/rohitg00/agentmemory/pull/816, https://github.com/rohitg00/agentmemory/issues/814, and https://github.com/rohitg00/agentmemory/pull/815 across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Security	Critical	Enforces `AGENTMEMORY_AGENT_SCOPE=isolated` on memory recall endpoints, preventing cross‑agent data leakage. Enforces `AGENTMEMORY_AGENT_SCOPE=isolated` on memory recall endpoints, preventing cross‑agent data leakage. Source: llm_adapter@2026-06-07 Confidence: high	—
Feature
Feature	Low	Adds `POST /agentmemory/graph/snapshot-rebuild` endpoint with optional `force: true`. Adds `POST /agentmemory/graph/snapshot-rebuild` endpoint with optional `force: true`. Source: llm_adapter@2026-06-07 Confidence: high	—
Feature	Low	Adds enumeration‑free `POST /agentmemory/graph/reset` for clean restarts. Adds enumeration‑free `POST /agentmemory/graph/reset` for clean restarts. Source: llm_adapter@2026-06-07 Confidence: high	—
Feature	Low	Introduces `--instance N` CLI flag to simplify multi‑daemon deployment (max N=50). Introduces `--instance N` CLI flag to simplify multi‑daemon deployment (max N=50). Source: llm_adapter@2026-06-07 Confidence: high	—
Feature	Low	Adds new API fields: `GraphSnapshot.topDegrees`, `GraphSnapshot.resetAt`, `GraphQueryResult.fromSnapshot`, `GraphQueryResult.warning`. Adds new API fields: `GraphSnapshot.topDegrees`, `GraphSnapshot.resetAt`, `GraphQueryResult.fromSnapshot`, `GraphQueryResult.warning`. Source: llm_adapter@2026-06-07 Confidence: high	—
Dependency	Medium	Pins `iii` console install to version v0.11.2 via `VERSION=${IIPINNED_VERSION}`. Pins `iii` console install to version v0.11.2 via `VERSION=${IIPINNED_VERSION}`. Source: llm_adapter@2026-06-07 Confidence: high	—
Bugfix
Bugfix	High	Prevents total data loss when stopping and restarting the agent memory service. Prevents total data loss when stopping and restarting the agent memory service. Source: llm_adapter@2026-06-07 Confidence: high	—
Bugfix	Medium	Resolves timeouts in `/graph/query` and `/graph/stats` for large corpora by using precomputed side‑indexes. Resolves timeouts in `/graph/query` and `/graph/stats` for large corpora by using precomputed side‑indexes. Source: llm_adapter@2026-06-07 Confidence: high	—
Bugfix	Medium	Prevents heartbeat crashes of `mem::graph-snapshot-rebuild` and `mem::graph-reset` on >25K‑node graphs. Prevents heartbeat crashes of `mem::graph-snapshot-rebuild` and `mem::graph-reset` on >25K‑node graphs. Source: llm_adapter@2026-06-07 Confidence: high	—
Bugfix	Medium	Eliminates multi‑instance port collisions by adding `--instance N` shortcut and adjusting port handling. Eliminates multi‑instance port collisions by adding `--instance N` shortcut and adjusting port handling. Source: llm_adapter@2026-06-07 Confidence: high	—

Full changelog

Wave release closing several breaking regressions reported against v0.9.26, plus an agent-scope isolation security fix, an iii version-pin audit fix, and a benchmark scorecard correction. No breaking changes; drop-in upgrade.

Security

AGENTMEMORY_AGENT_SCOPE=isolated not enforced on mem::search / POST /agentmemory/search / memory_recall / recall_context (#817). PR #654's isolation work covered smart-search, /memories, /observations, and /sessions but missed the BM25-only recall path. An isolated worker booted with AGENT_ID=B could read agent A's memories via the standard MCP memory_recall tool. Fail-closed: if isolated mode is on and no agent id resolves, the call throws rather than dropping the filter.

Fixed

/graph/query and /graph/stats timed out with "Invocation stopped" on large existing corpora (#814, PR #816). Refactored mem::graph-extract to maintain three side-indexes (graphNameIndex, graphEdgeKey, graphNodeDegree) so every extract path is O(1), never O(n). Hot path reads exclusively from a precomputed top-degree snapshot updated inline on every extract.
All data lost on agentmemory stop followed by restart (#843). Stop order inverted: worker first with a 5s SIGTERM grace so index flush can land, engine second.
mem::graph-snapshot-rebuild and mem::graph-reset heartbeat-crashed on legacy >25K-node corpora (#825). Rebuild now refuses pre-flight when no prior snapshot exists. Reset is now enumeration-free: writes empty snapshot with resetAt epoch marker. Future extracts treat any pre-resetAt row as orphan.
Multi-instance port collisions on one host (#750, PR #815). --port N now drags streams + engine. New --instance N shortcut picks a 100-port block.
iii console install pulled latest engine instead of the pinned v0.11.2 (audit). Install command now passes VERSION=${IIPINNED_VERSION}. Render path is platform-aware: Windows users get a PowerShell hint.

Added

POST /agentmemory/graph/snapshot-rebuild (≤25K nodes, force: true to bypass).
POST /agentmemory/graph/reset enumeration-free clean-restart.
--instance N CLI flag for multi-daemon (max N=50).
GraphSnapshot.topDegrees, GraphSnapshot.resetAt, GraphQueryResult.fromSnapshot, GraphQueryResult.warning.

Changed

REST endpoint count: 126 → 128.
mem::graph-stats reads exclusively from snapshot.
mem::graph-query empty-body / nodeType path reads exclusively from snapshot.
mem::search over-fetch triggers on agentId filter too.

Docs

Corrected coding-agent-life-v1 P@5 numbers (#796).
README refresh: stats 174 files / 1,390+ tests / 258 functions; "New in vX.Y.Z" callout removed.
import-jsonl users warned about Claude Code's cleanupPeriodDays 30-day default.

Full changelog: CHANGELOG.md

Security Fixes

Fix enforcement of AGENTMEMORY_AGENT_SCOPE=isolated on `mem::search`, `/agentmemory/search`, `memory_recall`, and `recall_context` endpoints; previously isolated workers could read other agents' memories.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track rohitg00/agentmemory

Get notified when new releases ship.

About rohitg00/agentmemory

All releases →