Open Multi-Agent 1.21.3 fixes a dangling-symlink sandbox escape in file_write (CVE-2026-108600)
In @open-multi-agent/core 1.5.0 through 1.21.2, an agent's file_write could create files outside its working directory by writing through a dangling symlink; v1.21.3 (Oct 16) now resolves those links one path component at a time and rejects any that point outside the root. Upgrading needs no code changes, and every built-in filesystem tool shares the fixed check.