LoginSign Up
← Back to all sparks
H

Huginn

INFRA · APIS
Velocity5.0

Self-hosted system for building agents that monitor the web and automate tasks

github.com/huginn/huginn ↗

Huginn closes a JqAgent leak of server secrets and outbound proxy bypasses.

automationself-hostedsecurityrubyopen source
◆Current state
Huginn has shipped near-weekly releases since August, mostly security fixes. v2026.11.09 starts jq with an empty environment so JqAgent filters can no longer read server environment variables, and enforces OUTBOUND_PROXY on HTTP paths that bypassed it, including JiraAgent and WeiboPublishAgent. Operators who enabled jq with untrusted users are told to rotate APP_SECRET_TOKEN and other credentials. It follows the 5 November XSS fixes and the Rails 8.1.4.1 upgrade.
◆Where it's heading
An outside researcher's reports are driving a steady security audit of Huginn's agents, one agent type at a time. Each release narrows what a user-built agent can reach on the host.
◆Prediction
More agent-level hardening is likely, especially for agents that run shell tools or make network calls, given the pattern of the last three releases. Whether this leads to a formal sandbox for user agents is not visible.

◆Recent moves

  1. 5d ago

    Huginn fixes JqAgent secret leak and outbound proxy bypasses

    JqAgent now runs jq with an empty environment and OUTBOUND_PROXY is enforced on paths that skipped it, with a credential-rotation notice for exposed installs. The third security release in a week, each closing a way a user's agent could reach the host.

    View source ↗
  2. 9d ago

    Rails 8.1.4.1 upgrade covers 21 security issues

    Upgrades Rails to 8.1.4.1 and its sanitizer dependencies, covering 21 upstream issues. Deployments behind a proxy must send consistent Forwarded and X-Forwarded-For headers, because Rails now rejects mismatches.

    View source ↗
  3. 9d ago

    Fixes stored XSS in Agent pages, adds CSRF to user switching

    Fixes stored XSS via shared OAuth service names and Markdown Agent descriptions, including those from imported scenarios, and makes admin user switching POST-only with CSRF. Multi-user instances are the ones most exposed.

    View source ↗
  4. 12d ago

    Huginn adds a three-day cooldown for new gem releases

    A dependency-update release that also adds a three-day cooldown before new gem versions are used. The cooldown is a sensible supply-chain guard, but users see no change.

    View source ↗
  5. 18d ago

    Huginn v2026.10.26: CA trust update and Agents page filters

    Docker builds now require Ubuntu's corrected CA package after the eMudhra incident, and gRPC prefers the OS trust store. The Agents page also gains responsive scenario and service filters, and DeDuplicationAgent passes through events when its property renders empty.

    View source ↗
  6. 21d ago

    Ruby 4.0.9 security upgrade and localized web UI

    A Ruby upgrade closes a regex memory-corruption risk that matters for an agent platform that compiles user-supplied patterns, and a LOCALE setting opens the UI to translations. Docker tag handling becomes stricter too. It continues the post-revival maintenance with a first visible feature.

    View source ↗