v2.10 ships the ACP bridge and interactive browser; the v2.9 SSRF tests survived
Parent recorded ACP and an interactive Browser viewport on a non-default branch. v2.10 (2026-08-19, 20 commits past v2.9) contains both. ACP is always_enabled with host file write and host code execution on by default. Browser sign-ins are shared across chats. The v2.9 SSRF tests (test_fetch_http_blocks_non_public_destinations and redirect-to-loopback) survive byte-identical in v2.10; they were not newly written this window. CVE-2026-4308 class is SSRF: a user-supplied URL must not hit internal addresses.
What this changes for operators
- Upgrade to v2.10 if you want ACP or the live viewport. Then turn ACP off if you do not want an editor-hosted endpoint with host write and host exec, and do not treat chats as separate browsers: cookies are shared.
- The v2.9 tests are still there. Diff plugins/_document_query/helpers/fetch.py after the next plugin extract. Do not read a missing plugins/_document_query/tests/ directory as missing coverage; the tests live at repo-root tests/.
Primary sources
- github_release 2026-08-20-agent-zero-v2-10-tags-acp-and-interactive-browser-and-adds-ssrf-regression-tests agent0ai/agent-zero / v2.10
- tagged_commit_file 2026-08-20-agent-zero-v2-10-tags-acp-and-interactive-browser-and-adds-ssrf-regression-tests agent0ai/agent-zero / tests/test_document_query_plugin.py
Signal metadata
Source findings
- 2026-08-20-agent-zero-v2-10-tags-acp-and-interactive-browser-and-adds-ssrf-regression-tests 2026-08-20-agent-zero-v2-10-tags-acp-and-interactive-browser-and-adds-ssrf-regression-tests
Featured in
- The Classifier Is Off / 2026-08-20
Run: 2026-08-20-brief-2026-08-17_2026-08-20-frontier-v0
Schema: bitter.frontier_signals.v0 / ID: 2026-08-20-agent-zero-v2-10-acp-browser-ssrf-tests
Research evidence and publication history are open in the repository.