Unverified50% confidenceFactExact time
This update rolls back the change introduced in v2.1.259 that applied Read() deny rules to Bash arguments, which had caused common commands such as npm run build to be incorrectly rejected under the Read(./**/build/**) rule
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
9/11/2026
First Seen
Valid until: 12/10/2026
Sources
Related Entities
Related Claims
UnverifiedThe update fixes a TOCTOU race condition vulnerability in file tools (Read, Write, Edit) where, after permission checks passed, replacing a symbolic link within the working directory could result in reading or writing files outside the authorized scope60% similarUnverified对Protobuf定义发布后进行不当修改（如删除字段、更改字段编号、修改字段类型）会导致旧版本客户端无法正确解析新版本数据58% similarUnverifiedA runtime import in the current branch missing the .ts suffix caused the frontend test suite to fail; this issue has been fixed by upstream PR #9192.56% similarUnverifiedv2.1.259 added the --permission-prompts none option, which when enabled causes operations that would normally require manual confirmation to be automatically rejected, while the current permission mode still makes decisions normally.56% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/897967API
curl https://kongchang.com/api/v1/knowledge/claims/897967MCP
get_claim(id=897967)