v1.31.2 (2026-08-04)
Important
Agent host URLs that resolve to private or reserved networks are now blocked by default (SSRF protection).
If you use remote agents on a LAN or Docker network, set AGENT_ALLOW_NETWORKS and/or AGENT_ALLOW_ENDPOINTS on the primary instance before upgrading.
By default, only the built-in agent endpoint 127.0.0.1:8001 is allowed when AGENT_ENABLED=true. See .env.example and the Remote hosts section in the README.
Bug Fixes
- security: Add agent URL validation and configuration options (
69701cc)
Documentation
- Update README with SSRF protection details for agent host URLs (
69701cc)
Detailed Changes: v1.31.1...v1.31.2