Unverified50% confidenceSolutionExact time
This update fixes a security issue where writes via symbolic link paths were evaluated using the "in-tree spelling," causing acceptEdits, allow rules, and auto mode to incorrectly approve writes outside the project tree; after the fix, the prompt explicitly displays the actual write destination.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
9/22/2026
First Seen
Valid until: 12/21/2026
Sources
Related Entities
Related Claims
UnverifiedThe update fixes a TOCTOU race condition vulnerability in file tools (Read, Write, Edit) where, after permission checks passed, replacing a symbolic link within the working directory could result in reading or writing files outside the authorized scope67% similarVerifiedSemantic versioning (SemVer) defines version numbers as a three-part MAJOR.MINOR.PATCH structure, where PATCH changes include only backward-compatible bug fixes or dependency updates.65% similarUnverified在演示中ChatGPT逐条引导用户修复问题，并用红色高亮标注需要更新的区域64% similarUnverifiedThis update fixes a series of issues that caused prompt cache invalidation, including tool list and system prompt prefix changes during sub-agent resumption breaking cache reuse.63% similarVerifiedAccording to the Semantic Versioning (SemVer) specification, a Patch-level update signifies backward-compatible bug fixes.63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/941261API
curl https://kongchang.com/api/v1/knowledge/claims/941261MCP
get_claim(id=941261)