LangChain deepagents 0.7.25 fixes symlink permission bypass
LangChain released deepagents 0.7.25. The update fixes a filesystem permission flaw where FilesystemBackend followed symlinks after checking rules, potentially allowing access to denied paths; permission rules and interrupt_on approvals now check both requested and symlink-resolved paths. It also adds inline skill tool support from model profiles and prefers ripgrep for sandbox searches.
Sources and evidence
Summary last validated Oct 14, 2026
Reader actions
Report an issue
Use this for an incorrect summary, wrong source, duplicate story, or wrong category. Submissions are private and do not change the story automatically.
Related coverage
- open source
Headroom hits GitHub Trending with token-compression library for LLM inputs
The headroomlabs-ai/headroom repository appeared on GitHub Trending on October 20, 2026, ranked seventh with 76,297 stars and 5,924 forks. The Python project compresses tool outputs, logs, files, and RAG chunks before they reach an LLM, claiming 20% fewer tokens for coding agents and 60-95% fewer for JSON with the same answers. It ships as a library, proxy, and MCP server.
- security
Microsoft adds agent risk controls to Microsoft 365 E7 and Project Perception
Microsoft announced new security capabilities in Microsoft 365 E7 and Project Perception aimed at containing agent risk and adapting protection continuously. The company framed AI agents as a new class of insider threat, saying security operations must match the speed at which agents act. No pricing, availability dates, or technical specifics were disclosed in the post.
- open source
akitaonrails/ai-memory Tops GitHub Trending for Agent Memory
The Rust repository akitaonrails/ai-memory appeared on GitHub Trending on October 18, 2026, at rank 6 with 9,912 stars, 716 forks, and 178 stars gained that day. Its description says it provides long-term memory for agent coding CLIs and enables handoff between different agent vendors.
- open source
stablyai/orca hits GitHub Trending for running fleets of coding agents
stablyai/orca appeared on GitHub Trending on October 18, 2026, ranked 8th with 95,392 stars and 6,109 forks, gaining 830 stars that day. The TypeScript repository lets users run coding agents such as Grok Bot and Claude Code on their own subscriptions across desktop, mobile, and remote runtime.
- open source
MadsLorentzen/ai-job-search Hits GitHub Trending With 48.7K Stars
The open-source repository MadsLorentzen/ai-job-search appeared on GitHub Trending on October 17, 2026, ranked 11th with 898 stars gained that day. Built on Claude Code and written in Python, it lets users evaluate job postings, tailor CVs, write cover letters, and prep interviews locally on their own machine.