v0.91.2 v2026.08.27
high risk
tobychui/zoraxyAug 26, 2026 → Aug 27, 20261 day between releases
What's New
Patch fixes critical security vulnerabilities and service-binding migration
Breaking Changes
- Service-binding migration disconnects unauthorized private bindings and disables affected Agents
New Features
- Service-binding migration logic to disconnect unauthorized bindings
Bug Fixes
- Fixes arbitrary shell command execution in PdfInfoAgent
- Fixes unauthorized OAuth Service binding to Agents
- Fixes manual event propagation across other users' Agents
- Fixes duplicate event delivery in concurrent scans
Upgrade Notes
Upgrade promptly to address critical security flaws. Be aware that the service-binding migration will disconnect unauthorized private bindings and disable affected Agents for administrator review.
The Two Releases
v0.91.2
v0.91.2
Aug 26, 2026· 2 months ago
A small patch fixing the GitHub MCP and correcting code indentation issues in the UI, while introducing three new AI models via Hyper.
Full release notesv2026.08.27
v2026.08.27
Aug 27, 2026· 2 months ago
Security release addressing command injection, OAuth credential hijacking, event propagation manipulation, and duplicate event delivery.
Full release notes