vibehacker
News

Open Multi-Agent 1.21.3 fixes a dangling-symlink sandbox escape in file_write (CVE-2026-108600)

In @open-multi-agent/core 1.5.0 through 1.21.2, an agent's file_write could create files outside its working directory by writing through a dangling symlink; v1.21.3 (Oct 16) now resolves those links one path component at a time and rejects any that point outside the root. Upgrading needs no code changes, and every built-in filesystem tool shares the fixed check.

More news

View all

HeyPCB MCP lets coding agents design, route, and export KiCad circuit boards

As of Oct 16, adding https://api.heypcb.ai/mcp to Claude Code, Codex, Cursor, or ChatGPT lets agents draw schematics, place parts, route boards, run checks, export KiCad projects, and design enclosures. In HeyPCB's demo, Claude Code laid out a 145 part 8x8 RGB display board, fixed a rotated LED that wouldn't route, and finished with zero DRC and ERC errors in KiCad…

HeyPCB Blog

Spotted something we missed? Start a thread.