v7.5.6 v2026.08.27
vectorize-io/hindsightAug 26, 2026 → Aug 27, 20261 day between releases
What's New
Critical security release fixes command injection and unauthorized access vulnerabilities.
Breaking Changes
- Service-binding migration disables affected Agents for administrator review
- Behavioral change prevents duplicate event delivery in concurrent scans
New Features
- Service-binding migration to disconnect unauthorized bindings
Improvements
- Hardened PdfInfoAgent against command injection
- Fixed unauthorized OAuth Service binding
- Fixed unauthorized event propagation
- Fixed duplicate event delivery in concurrent scans
Bug Fixes
- Command injection via crafted PdfInfoAgent event URL
- Unauthorized binding of private OAuth Services
- Unauthorized manual event propagation
- Duplicate event delivery in concurrent scans
Upgrade Notes
Upgrade promptly to address critical security vulnerabilities. The Service-binding migration will disable affected Agents; administrators must review logs to re-enable authorized bindings. Ensure untrusted users are restricted to prevent command injection risks.
The Two Releases
v7.5.6
Aug 26, 2026· 2 months ago
This release provides pre-built binaries for the Asterisk AI Voice Agent CLI tools, including setup, diagnostics, and root cause analysis utilities, along with installation instructions for Linux, macOS, and Windows.
Full release notesv2026.08.27
Aug 27, 2026· 2 months ago
This is a critical security release fixing four vulnerabilities: command injection in PdfInfoAgent, unauthorized OAuth Service binding, unauthorized event propagation, and duplicate event delivery in concurrent scans.
Full release notes