Bitter Frontier What coding agents just made possible, where the bottleneck moved, and what deserves attention.

Finding / openhands

2026-10-13-openhands-credential-telemetry-and-approval-repairs-ship-as-ordinary-pull-requests

Credential, telemetry and approval repairs ship as ordinary pull requests. Cross-backend credentials: the settings cache was valid for five minutes no matter which backend answered, and it also builds conversation-start payloads, so per #17430 a conversation started on backend B right after switching from A could be started with A’s credentials (fixed in v1.24.0; #16958 in v1.27.0 also pins retries to the backend that started them). Trajectory downloads: “Download trajectory” zipped the whole conversation directory, including the acp/<provider>/ runtime credential files, so a shared zip of a Claude Code, Codex, Gemini, Pi or OpenCode conversation could carry ACP credential files (SDK #5551, in agent server 1.54.0, Canvas v1.27.0 and later). Git Sync: the status card printed user:password@ from stored remote URLs (#18039, v1.26.0). Telemetry: under Do Not Track the PostHog client still initialized and fetched config and flags from z.openhands.dev (#18086, v1.26.0); until v1.21.0, autocapture recorded every click, change and submit once consent was given (#17502). Approvals: a rejected action kept its event group spinning as if in flight, and off macOS the confirm and reject shortcuts did nothing while the buttons advertised them; they now accept Ctrl and cannot fire twice (#17995, #18127, v1.27.0).

Channel: tagged-release. Half: defect. Date: 2026-09-22 to 2026-10-12.

Operator consequence: Run v1.27.0 or later (v1.27.1) if you switch one Canvas between personal and shared backends, download trajectories, or sync to credentialed remotes. Rotate ACP provider credentials if you shared a trajectory zip of an ACP conversation made before v1.27.0, and review credential-bearing settings used after a backend switch on v1.23.0 or earlier and rotate credentials where the wrong backend received them. The telemetry consent checkbox is pre-checked (telemetry-consent-banner.tsx L99), and Do Not Track is fully honored only from v1.26.0. No observed theft was established by these code paths. No new first-party advisory was found in this window; dependency advisories remain relevant (sections 15 and 16).

Receipt

Finding metadata

Confidence
high

Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0

Finding ID: 2026-10-13-openhands-credential-telemetry-and-approval-repairs-ship-as-ordinary-pull-requests

Profile citations

Source links

Primary links, including exact changelog lines when available.

  1. OpenHands
    merged pr2026-10-13-openhands-credential-telemetry-and-approval-repairs-ship-as-ordinary-pull-requestsgithub.com/OpenHands/OpenHands/pull/17430merged pr2026-10-13-openhands-credential-telemetry-and-approval-repairs-ship-as-ordinary-pull-requestsgithub.com/OpenHands/software-agent-sdk/pull/5551tagged commit file2026-10-13-openhands-credential-telemetry-and-approval-repairs-ship-as-ordinary-pull-requestsOpenHands/software-agent-sdk / openhands-agent-server/openhands/agent_server/file_router.py#L159merged pr2026-10-13-openhands-credential-telemetry-and-approval-repairs-ship-as-ordinary-pull-requestsgithub.com/OpenHands/OpenHands/pull/18039merged pr2026-10-13-openhands-credential-telemetry-and-approval-repairs-ship-as-ordinary-pull-requestsgithub.com/OpenHands/OpenHands/pull/18086merged pr2026-10-13-openhands-credential-telemetry-and-approval-repairs-ship-as-ordinary-pull-requestsgithub.com/OpenHands/OpenHands/pull/18127merged pr2026-10-13-openhands-credential-telemetry-and-approval-repairs-ship-as-ordinary-pull-requestsgithub.com/OpenHands/OpenHands/pull/17995official docs2026-10-13-openhands-credential-telemetry-and-approval-repairs-ship-as-ordinary-pull-requestsgithub.com/OpenHands/OpenHands/security/advisories