LangChain (Vendor): news timeline & CVEs

[AINews] not much happened today

Latent Space AI news digest covers Anthropic's Claude Code Projects, Google's managed agent APIs, TypeSafe's Jev classifier, and OpenAI's Astra for Law launch.

The 9/16-9/17/2026 AI news roundup highlights Anthropic's Claude Code Projects enabling one conversation to spawn parallel cloud sessions, and Google's Gemini managed agents adding a Credentials API, Files API, and claims of 30% lower costs. It also covers TypeSafe's Jev, a fast constrained-output classifier being used for routing, judgment, and structured decisions, with open reproductions such as openjev-s on Qwen3.6-35B-A3B. OpenAI launched Astra for Law with 26 partner-built and 47 community plugins via Trusted Access, with reports it beats generic GPT-6 Astra plus web search on Vals' legal benchmark. Research items include DeepMind's Stellar Colosseum multi-agent math harness (Codeforces 4263, 71.0% on TCS-Bench) and NVIDIA-associated Agora using Git commits as shared memory.

Latent SpaceSep 18, 06:28 UTC · 9d agoAI industry1

Loopjacking: Hijacking Human-in-the-Loop Approval

Loopjacking lets agent approvals authorize a different operation than the human reviewed.

Researchers name Loopjacking for human-in-the-loop failures where approval of operation A is bound to a materially different operation B. One variant misrepresents B at review time; the other substitutes mutable workflow state after a correct review. They reproduced post-approval substitution in seven Agno AgentOS releases through 3.0.9 and in 12 conditional in-memory LangGraph Agent Server compositions through 0.14.0, plus a representation mismatch in OpenClaw 2026.2.23 that 2026.2.24 rejects. OpenAI Agents SDK 0.22.0 and 0.22.2 kept exact serialized per-call binding and rejected mutated actions. Exact approval rendering and use-time comparison, or blocking unauthorized pending-state changes, stopped the tested cases; prevalence was not estimated.

arXiv cs.CRSep 17, 20:58 UTC · 9d agoAI safety & security

LangChain

Timeline2 articles

Appears with

[AINews] not much happened today

Loopjacking: Hijacking Human-in-the-Loop Approval