Evidence record / agent-zero
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-13-agent-zero-the-retained-parallel-secret-fix-shares-the-worker-argument-dictionary
The retained parallel secret fix shares the worker argument dictionary. Parallel workers previously held a shallow copy before pre-execution hooks replaced secret placeholders in the original dictionary. Tools reading self.args could therefore send literal aliases and fail authentication. The retained fix assigns tool.args = tool_args. aa8e1c042a is an ancestor of stable, but its recursive implementation is not retained. Issue #1838 is still open; this record does not establish why. The confirmed failure mechanism leaves placeholders unresolved; this record does not demonstrate secret-value disclosure.
Channel: tagged-release. Half: defect. Date: 2026-09-23 (first stable; PR merged 2026-09-18).
Operator consequence: Use v2.13 or later for this parallel-call path, with v2.14 the current recommendation. Re-test an authenticated parallel operation without logging credentials. Inspect the file at the tag when tracking a fix: ancestry can survive a revert. Do not carry forward the earlier profile’s unresolved leak direction or treat the reverted recursive patch as proof that arbitrary nested substitutions now work.
Receipt
Finding metadata
Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0
Finding ID: 2026-10-13-agent-zero-the-retained-parallel-secret-fix-shares-the-worker-argument-dictionary
Profile citations
- Agent Zero / claim / parallel-argument-dictionary-fix
Source links
Primary links, including exact changelog lines when available.
- commit2026-10-13-agent-zero-the-retained-parallel-secret-fix-shares-the-worker-argument-dictionarygithub.com/agent0ai/agent-zero/commit/4d94c3b173ee42ceb64f99eb8ef493254417bde9tagged commit file2026-10-13-agent-zero-the-retained-parallel-secret-fix-shares-the-worker-argument-dictionaryagent0ai/agent-zero / helpers/parallel_tools.py#L643merged pr2026-10-13-agent-zero-the-retained-parallel-secret-fix-shares-the-worker-argument-dictionarygithub.com/agent0ai/agent-zero/pull/1901official docs2026-10-13-agent-zero-the-retained-parallel-secret-fix-shares-the-worker-argument-dictionarygithub.com/agent0ai/agent-zero/issues/1838
Versioned source: run artifact