Bitter Frontier What coding agents just made possible, where the bottleneck moved, and what deserves attention.

Finding / agent-zero

2026-10-13-agent-zero-the-retained-parallel-secret-fix-shares-the-worker-argument-dictionary

The retained parallel secret fix shares the worker argument dictionary. Parallel workers previously held a shallow copy before pre-execution hooks replaced secret placeholders in the original dictionary. Tools reading self.args could therefore send literal aliases and fail authentication. The retained fix assigns tool.args = tool_args. aa8e1c042a is an ancestor of stable, but its recursive implementation is not retained. Issue #1838 is still open; this record does not establish why. The confirmed failure mechanism leaves placeholders unresolved; this record does not demonstrate secret-value disclosure.

Channel: tagged-release. Half: defect. Date: 2026-09-23 (first stable; PR merged 2026-09-18).

Operator consequence: Use v2.13 or later for this parallel-call path, with v2.14 the current recommendation. Re-test an authenticated parallel operation without logging credentials. Inspect the file at the tag when tracking a fix: ancestry can survive a revert. Do not carry forward the earlier profile’s unresolved leak direction or treat the reverted recursive patch as proof that arbitrary nested substitutions now work.

Receipt

Finding metadata

Confidence
high

Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0

Finding ID: 2026-10-13-agent-zero-the-retained-parallel-secret-fix-shares-the-worker-argument-dictionary

Profile citations

  • Agent Zero / claim / parallel-argument-dictionary-fix

Source links

Primary links, including exact changelog lines when available.

  1. Agent Zero
    commit2026-10-13-agent-zero-the-retained-parallel-secret-fix-shares-the-worker-argument-dictionarygithub.com/agent0ai/agent-zero/commit/4d94c3b173ee42ceb64f99eb8ef493254417bde9tagged commit file2026-10-13-agent-zero-the-retained-parallel-secret-fix-shares-the-worker-argument-dictionaryagent0ai/agent-zero / helpers/parallel_tools.py#L643merged pr2026-10-13-agent-zero-the-retained-parallel-secret-fix-shares-the-worker-argument-dictionarygithub.com/agent0ai/agent-zero/pull/1901official docs2026-10-13-agent-zero-the-retained-parallel-secret-fix-shares-the-worker-argument-dictionarygithub.com/agent0ai/agent-zero/issues/1838