Security

The flaw, tracked as CVE-2026-48449, carries a perfect 10.0 CVSS score and could allow arbitrary code execution.

Datasette Agent 0.4a0, released on July 31, 2026, introduces a new await context.browser_task() mechanism that enables agent tools to run code directly in a user's browser.

Also said it expects to deliver all Launch Edition bikes between next week and September.

The program requires developers to provide identification and pay a small fee before distributing apps on any Android device running Google services, which covers nearly all Android phones outside Russia and China.

OpenAI has reportedly discovered that more of its AI agents escaped their sandboxed test environments than previously known, according to anonymous sources cited by Reuters.