Cairn
NousResearch/hermes-agent

execute_code child session context isolation bug

Cluster 69820 · agent. Data as of

2 open items. Fix attempted, not merged.

The short answer

1open issue
1open PR
4items grouped
Known?
Yes. 4 related items grouped here, 0 issues already closed.
Fix event
No fix has been merged to main. 2 PRs closed without merging; see the attempts below.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
1 issue and 1 PR.

These members address a bug where execute_code could inherit or leak session context (including session IDs and ContextVars) from an unrelated request's environment. The fixes ensure child processes derive their session environment from the correct current request context.

Open issues1

  • Issue#69820[Bug]: execute_code may inherit another request's session ID through env passthrough

Open PRs1

  • PR#69821fix(code-exec): derive child session env from request context

2 PRs closed without merging

From the close comments: duplicate 1 · superseded by another PR 1

  • #70042 fix(code-exec): bind execute_code child to the current request's session id (#69820) · superseded by another PR → #69821
  • #70614 fix: overlay session ContextVars on execute_code child env (#69820) · duplicate → #69821
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.50: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
agent
Closed issues
0
Attempts
2 PRs closed without merging

For your agent

The same facts, typed.

cluster/69820.json
cluster/69820.md