claude-flow

v3.32.2 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 10d AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

agentic-ai agentic-framework agentic-workflow agents ai-agents ai-assistant

+14 more

ai-coding ai-skills autonomous-agents claude-code codex harness mcp-server multi-agent multi-agent-systems npm skills swarm swarm-intelligence typescript

Affected surfaces

auth rce_ssrf

Summary

AI summary

Updates Highlights, Published stable packages, and Issues fixed across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Feature	Medium	Adds a zero‑dependency built‑in scanner that handles prompt injection, jailbreak, exfiltration, and common PII when the full AI Defense package is absent. Adds a zero‑dependency built‑in scanner that handles prompt injection, jailbreak, exfiltration, and common PII when the full AI Defense package is absent. Source: llm_adapter@2026-07-17 Confidence: high	—
Bugfix
Bugfix	Medium	Fixes Codex startup by using correct `ruflo@latest mcp start` command with 120‑second timeout. Fixes Codex startup by using correct `ruflo@latest mcp start` command with 120‑second timeout. Source: llm_adapter@2026-07-17 Confidence: high	—
Bugfix	Medium	Patches plugin identities for `ruflo-core` 0.2.4 and `ruflo-cost-tracker` 0.26.2, replacing stale cached bundles. Patches plugin identities for `ruflo-core` 0.2.4 and `ruflo-cost-tracker` 0.26.2, replacing stale cached bundles. Source: llm_adapter@2026-07-17 Confidence: high	—
Bugfix	Medium	Ensures `hooks session-end` always closes the native bridge and uses a 15‑second watchdog with fallback to `ruflo@latest`. Ensures `hooks session-end` always closes the native bridge and uses a 15‑second watchdog with fallback to `ruflo@latest`. Source: llm_adapter@2026-07-17 Confidence: high	—
Bugfix	Medium	Corrects plugin MCP tool names to use the installed‑plugin namespace for all 1,111 references. Corrects plugin MCP tool names to use the installed‑plugin namespace for all 1,111 references. Source: llm_adapter@2026-07-17 Confidence: high	—
Bugfix	Medium	Corrects statusline project identity to default to the real project name instead of a fabricated value. Corrects statusline project identity to default to the real project name instead of a fabricated value. Source: llm_adapter@2026-07-17 Confidence: high	—
Bugfix	Medium	Restores `security defend` functionality when the optional full AI Defense package is missing. Restores `security defend` functionality when the optional full AI Defense package is missing. Source: granite4.1:30b@2026-07-17-audit Confidence: low	—

Full changelog

Ruflo v3.32.2 ? stable Codex integration and plugin recovery

This stable patch release fixes the hook parsing and MCP startup failures reported against cached Ruflo plugin bundles, hardens Codex initialization, restores security defend, and corrects plugin MCP tool names.

Highlights

Codex startup: generated Ruflo MCP registrations now use the platform-correct ruflo@latest mcp start command and a 120-second minimum startup timeout.
Valid versioned hooks: patched plugin identities (ruflo-core 0.2.4 and ruflo-cost-tracker 0.26.2) replace stale cached bundles; shipped hook configs are non-empty, valid JSON.
Reliable shutdown: hooks session-end always closes the native bridge; hook shims use a 15-second watchdog and stable ruflo@latest fallback.
Correct plugin tools: 1,111 plugin MCP references now use the installed-plugin namespace. Standalone repository docs retain their correct standalone namespace.
Working security defense: a zero-dependency built-in scanner handles prompt injection, jailbreak, exfiltration, and common PII when the optional full AI Defense package is absent.
Honest statusline: project name is the default identity, and security status counts real findings instead of fabricated CVEs.

Install or update

npm install -g [email protected]
npx -y [email protected] init --codex

For manual Codex configuration, set:

[mcp_servers.ruflo]
startup_timeout_sec = 120

Windows uses command = "cmd" with args = ["/c", "npx", "-y", "ruflo@latest", "mcp", "start"]; POSIX uses command = "npx" with args = ["-y", "ruflo@latest", "mcp", "start"].

Published stable packages

All three are published under npm's latest dist-tag. No alpha release tag was used.

Validation

PR #2700 merged after 122 successful checks, 3 intentional skips, and 0 failures. Focused validation also passed 144/144 tests, all package dry-runs, helper signature verification, 37/37 plugin manifests, 134/134 skill frontmatter files, Windows hook shim smoke (12/12), plugin namespace auditing, and signed witness verification.

Detailed recovery and technical notes

The full guide includes the exact Windows cache recovery commands, MCP TOML examples, package checksums, issue-by-issue behavior, and validation details:

https://gist.github.com/ruvnet/2b37060362af57bbffd421aa09e4db50

Issues fixed

#2670 ? security defend missing optional runtime
#2682 ? statusline project identity
#2685 ? plugin-bundled MCP namespace mismatch
#2691 ? hooks session-end native handle leak
#2694 ? fabricated CVE statusline counts

Full Changelog: https://github.com/ruvnet/ruflo/compare/v3.32.1...v3.32.2

Security Fixes

Security `defend` now functions even when the optional full AI Defense package is absent; prevents fabricated CVE counts in statusline

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track claude-flow

Get notified when new releases ship.

About claude-flow

Deploy multi-agent swarms with coordinated workflows.

All releases →