This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
+7 more
ReleasePort's take
Moderate signalThe release fixes a cross‑agent memory leak triggered by AGENTMEMORY_AGENT_SCOPE=isolated and resolves several stability bugs.
Why it matters: Closes a critical memory‑leak bug (severity 70) affecting agents using isolated scope; also patches crashes on null payloads and hanging reconnect loops, improving reliability for developers and SREs.
Summary
AI summaryClosed cross-agent memory leak when AGENTMEMORY_AGENT_SCOPE=isolated.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | High |
Closes cross-agent memory leak via /agentmemory/context when AGENTMEMORY_AGENT_SCOPE=isolated Closes cross-agent memory leak via /agentmemory/context when AGENTMEMORY_AGENT_SCOPE=isolated Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Feature | Low |
Adds `agentmemory demo --serve` one‑command seed and recall demo Adds `agentmemory demo --serve` one‑command seed and recall demo Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Feature | Low |
Adds `opencode connect` adapter for onboarding agent picker Adds `opencode connect` adapter for onboarding agent picker Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Feature | Low |
Session summaries now returned by GET /agentmemory/sessions API Session summaries now returned by GET /agentmemory/sessions API Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Feature | Low |
Adds 15 detailed, self‑updating skills covering the whole system Adds 15 detailed, self‑updating skills covering the whole system Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Feature | Low |
Adds Agent‑driven install runbook (INSTALL_FOR_AGENTS.md) and Windows/WSL2 clarity Adds Agent‑driven install runbook (INSTALL_FOR_AGENTS.md) and Windows/WSL2 clarity Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Feature | Low |
Adds colored CLI output and quieter boot process Adds colored CLI output and quieter boot process Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Bugfix | Medium |
Hooks no longer crash on null payload from Codex CLI / Claude Code Hooks no longer crash on null payload from Codex CLI / Claude Code Source: llm_adapter@2026-07-19 Confidence: high |
— |
| Bugfix | Medium |
Engine conflict no longer hangs in WS reconnect loop; recovers cleanly Engine conflict no longer hangs in WS reconnect loop; recovers cleanly Source: llm_adapter@2026-07-19 Confidence: high |
— |
Full changelog
No breaking changes, drop-in upgrade.
Security
- Closed cross-agent memory leak via
/agentmemory/contextunderAGENTMEMORY_AGENT_SCOPE=isolated(#1057)
Fixed
- Hooks no longer crash ("hook exited with code 1") on a null payload from Codex CLI / Claude Code (#1047)
- Engine conflict no longer hangs in a WS reconnect loop; clean recovery and pinned-engine guidance (#984)
- Onboarding stat drift and over-strict engine version gate (#852)
Added
agentmemory demo --serve: one-command seed and recall demo, no second terminal (#852)- opencode
connectadapter; onboarding agent picker single-sourced from adapters (#883) - Session summaries now returned by
GET /agentmemory/sessions(#882) - 15 detailed, self-updating skills covering the whole system (#854)
- Agent-driven install runbook (
INSTALL_FOR_AGENTS.md) and Windows/WSL2 clarity (#853) - Colored CLI output and quieter boot (#984)
Full changelog: https://github.com/rohitg00/agentmemory/compare/v0.9.27...v0.9.28
Security Fixes
- CVE‑2024‑XXXXX — Closed cross-agent memory leak via `/agentmemory/context` when AGENTMEMORY_AGENT_SCOPE=isolated (#1057)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About rohitg00/agentmemory
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]