v1.7.0 v2026.09.08

Name: ink
Author: vadimdemedes

high risk

vadimdemedes/inkSep 7, 2026 → Sep 8, 20260 days between releases

What's New

Critical security release addressing HTML injection, file read, and CORS vulnerabilities with breaking agent and Docker changes.

Breaking Changes

TwitterStreamAgent is retired.
Web request routes now use Content-Security-Policy sandbox (breaks internal API calls).
Docker images no longer ship fixed APP_SECRET_TOKEN.

New Features

Content-Security-Policy sandbox enforcement.
Devise paranoid mode.

Improvements

Hardening deployment defaults (Docker configurations).

Bug Fixes

Fixed Scenario description HTML injection vulnerability.
Fixed unauthorized file read vulnerability affecting Agents.
Fixed web request handlers to run on sandboxed origins.
Fixed Scenario icons stored without validation.
Fixed pages served by LiquidOutputAgent/DataOutputAgent running on Huginn's origin.

Upgrade Notes

Rotate APP_SECRET_TOKEN and secrets in .env after upgrading due to the file read vulnerability. Internal API calls from served pages will break; update code to use sandboxed origins. Remove or update code using the retired TwitterStreamAgent.

The Two Releases

v1.7.0

Sep 7, 2026· 1 month ago

A feature release improving plan management, Claude API limit handling, and Windows support, including archiving logs and updating default models.

Full release notes

v2026.09.08

Sep 8, 2026· 1 month ago

A critical security release addressing HTML injection, unauthorized file reading, and cross-origin request vulnerabilities, alongside hardening deployment defaults.

Full release notes