MIRA v0.350.1 — public beta. A security patch that scopes the real-time notification stream per-user. Multi-user operators should upgrade. No API changes, no config changes, no migration — safe to upgrade in place, and clients need no update.
Self-hostable single binary, AGPL-3.0-or-later, signed with the vexillon.ai release key.
Install
# Linux / macOS
curl -fsSL https://get.vexillon.ai/install.sh | sh
# Windows (PowerShell)
irm https://get.vexillon.ai/install.ps1 | iex
Security fix: per-user scoping of the SSE notification stream
The real-time notification stream (GET /api/notifications/stream) subscribed to the shared broadcast bus but didn't filter by the authenticated caller — so every connected client received every user's notifications, and the notification body carries the actual message text (proactive follow-ups, companion check-ins, inbound-message previews).
This was latent on a single-user self-host, but a real cross-user information disclosure the moment a second account connects (any multi-user / RBAC / SSO deployment).
- The stream now filters per user: a notification addressed to a user reaches only that user.
- A global notice (e.g. a system/health event) reaches regular users but not ephemeral guest sessions.
- The web-push path was already per-user; only the SSE stream was affected.
Single-user installs are unchanged in behavior — you still receive all of your own notifications.
Verify (optional)
Every archive is signed with the vexillon.ai minisign key committed at verification/release-pubkey.minisign:
minisign -Vm mira-0.350.1-<target>.tar.gz -p verification/release-pubkey.minisign