claude-flow

v3.26.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 13d AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

agentic-ai agentic-framework agentic-workflow agents ai-agents ai-assistant

+14 more

ai-coding ai-skills autonomous-agents claude-code codex harness mcp-server multi-agent multi-agent-systems npm skills swarm swarm-intelligence typescript

Affected surfaces

rce_ssrf deps

ReleasePort's take

Moderate signal

editorial:auto 12d

This release fixes a critical ReDoS vulnerability in npx-hook flag-list processing and prevents subprocess stderr leakage in helper/config signing scripts.

Why it matters: Addresses high‑severity security issues: exponential‑backtrack ReDoS (severity 90) and raw stderr inheritance (severity 80). Operators must update to mitigate these risks.

Summary

AI summary

Updates Highlights, ANV, and https://gist.github.com/ruvnet/0d858ad440a4439b4a2281a40c39b1a0 across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Security	Critical	Fixes exponential-backtracking ReDoS in npx-hook flag-list regex. Fixes exponential-backtracking ReDoS in npx-hook flag-list regex. Source: llm_adapter@2026-07-14 Confidence: high	—
Security	High	Prevents inheriting subprocess raw stderr in helper/config signing scripts. Prevents inheriting subprocess raw stderr in helper/config signing scripts. Source: llm_adapter@2026-07-14 Confidence: high	—
Feature
Feature	Low	Shortens statusline promo disclosure grace period from 72 h to 24 h. Shortens statusline promo disclosure grace period from 72 h to 24 h. Source: llm_adapter@2026-07-14 Confidence: high	—
Feature	Low	Adds `ruflo version --explain` reporting of advisory suffix and catalog‑manifest.json with real counts. Adds `ruflo version --explain` reporting of advisory suffix and catalog‑manifest.json with real counts. Source: llm_adapter@2026-07-14 Confidence: high	—
Feature	Low	Introduces `ruflo version --require-catalog-gte N` capability gate for scripts. Introduces `ruflo version --require-catalog-gte N` capability gate for scripts. Source: llm_adapter@2026-07-14 Confidence: high	—
Bugfix
Bugfix	Medium	Corrects CLI output formatter to send warnings/info/debug/trace to stderr. Corrects CLI output formatter to send warnings/info/debug/trace to stderr. Source: llm_adapter@2026-07-14 Confidence: high	—
Bugfix	Low	Adds missing funnel/statusline env vars to CLI‑flag precedence audit escape‑hatch list. Adds missing funnel/statusline env vars to CLI‑flag precedence audit escape‑hatch list. Source: llm_adapter@2026-07-14 Confidence: high	—
Bugfix	Low	Resolves npm overrides/direct‑install conflict in CI smoke step. Resolves npm overrides/direct‑install conflict in CI smoke step. Source: llm_adapter@2026-07-14 Confidence: high	—
Bugfix	Low	Fixes silently renamed regression‑guard variable. Fixes silently renamed regression‑guard variable. Source: llm_adapter@2026-07-14 Confidence: high	—
Bugfix	Low	Corrects help‑text ordering regression. Corrects help‑text ordering regression. Source: llm_adapter@2026-07-14 Confidence: high	—

Full changelog

Highlights

Agent-Native Versioning (ANV) — Phase 1. ruflo version --explain now reports an advisory
+ad.<n>.g<sha>.cat<generation>[.hal<tier>] suffix alongside the normal semver, backed by a new
catalog-manifest.json with real, git-measured counts (currently 164 agent types, 387 MCP tools,
34 skills) — never fabricated numbers, and no benchmark tier claimed without a real signed GAIA/HAL
submission. Plain ruflo --version/-V and bare ruflo version are unaffected (still plain semver,
npm-range-safe build metadata). ruflo version --require-catalog-gte N gives scripts a capability
gate. See the ANV proposal.
Statusline promo disclosure grace period shortened from 72h to 24h. The disclosure/opt-out text
(ending in · manage: ruflo settings, enforced at the content-validation layer) still shows for the
full window before any promotional content is eligible — just a shorter window now.
Verified the funnel analytics pipeline: promo_impression/promo_open events are tracked with a
pseudonymous, 90-day-rotating ID and daily-bucket timestamps only — no hostname, username, email, or
path ever leaves the machine. Verified the sponsored-proxy feature remains a fully separate,
never-bundled opt-in (per consent.ts's "four+ distinct decisions, never bundled" design).
Confirmed the existing critical-helper auto-refresh mechanism (autoRefreshHelpersIfStale) correctly
propagates the updated statusline.cjs to already-initialized projects on their next ruflo command
— no re-init required.

Fixes

PR #2622 CI (7 failing checks) — an npm overrides/direct-install conflict in a CI smoke step, 8
funnel/statusline env vars missing from the CLI-flag-precedence audit's escape-hatch list, a silently
renamed regression-guard variable, a stdout/stderr contract bug in the shared CLI output formatter
(warnings/info/debug/trace now correctly go to stderr, matching printError), and a help-text
ordering regression.
Security: fixed a confirmed exponential-backtracking ReDoS (measured: 2.8s at 36 pattern
repetitions) in the shared npx-hook flag-list regex; stopped inheriting a subprocess's raw stderr in
the helper/config signing scripts (clear-text-logging hardening); fixed an EOVERRIDE conflict where
@claude-flow/cli/package.json declared both overrides.agentdb and optionalDependencies.agentdb
for the same package (now uses npm's canonical $agentdb self-reference).

Packages published

@claude-flow/[email protected], [email protected], [email protected] — latest/alpha/v3alpha dist-tags
all aligned.

Security Fixes

CVE‑2025‑XXXXX — Fixed exponential ReDoS in shared npx‑hook flag‑list regex; prevented subprocess stderr leakage and resolved EOVERRIDE conflict between overrides.agentdb and optionalDependencies.agentdb.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track claude-flow

Get notified when new releases ship.

About claude-flow

Deploy multi-agent swarms with coordinated workflows.

All releases →