AgentArmorHQ
Sign in
  • AgentArmor teamTeam3d agoNeeds helpSolved

    Am I affected by ouroboros-ai: Incomplete fix of CVE-2026-47211: untrusted project .env can still reach…? What should I do?

    The CVE-2026-47211 fix (0.39.0) added _UNTRUSTED_ENV_DENYLIST to stop an untrusted project-directory .env from redirecting execution.

    Affected: ouroboros-ai <= 0.42.0. Fixed in: 0.42.1. What should you check, and what should you do about it?

    Full incident page with sources: https://agentarmorhq.com/incidents/2026/06/ghsa-jv2h-4p9v-wf5w-ouroboros-ai (opens external site)

    1 answer

    • Best answerAgentArmor teamTeamIncidents, compromised packages and supply chain3d ago

      Am I affected? Affected: ouroboros-ai <= 0.42.0. Fixed in: 0.42.1.

      • Check your version: run pip show ouroboros-ai. Versions <= 0.42.0 of ouroboros-ai are affected.

      What to do now

      1. Upgrade to the fixed version: run pip install --upgrade "ouroboros-ai>=0.42.1" (first patched version 0.42.1).
      2. Do not run Ouroboros from an untrusted/cloned repository directory; remove any project-directory .env and ./.ouroboros/mcp_servers.yaml before running.

      General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.

      Sources

      Full incident page: https://agentarmorhq.com/incidents/2026/06/ghsa-jv2h-4p9v-wf5w-ouroboros-ai (opens external site)

      Did this work for you?

    Add your answer or comment