-
Notifications
You must be signed in to change notification settings - Fork 2.9k
All issues
Issue creation is restricted in this repository
- #1047 · tanzhenxin opened
on Nov 17, 2025 - #10004 · yiliang114 opened
on Aug 25, 2026 2
Issues
is:issue state:open
is:issue state:open
Search results
Main CI failed: Qwen Code CI on a82a11a0a4d8
autofix/approvedMaintainer explicitly approved this issue for autonomous autofixMaintainer explicitly approved this issue for autonomous autofixautofix/in-progressThe scheduled autofix agent has claimed this issueThe scheduled autofix agent has claimed this issuestatus/ready-for-agentFully specified; an AFK coding agent can pick this up with no human contextFully specified; an AFK coding agent can pick this up with no human contexttype/bugSomething isn't working as expectedSomething isn't working as expectedStatus: Open.#10200 In QwenLM/qwen-code;security: lossy MCP permission aliases can authorize tools from a different server
category/securitySecurity and privacySecurity and privacypriority/P1High priority issueHigh priority issuescope/mcpModel Context ProtocolModel Context Protocolscope/vulnerabilitySecurity vulnerabilitiesSecurity vulnerabilitiestype/bugSomething isn't working as expectedSomething isn't working as expectedStatus: Open.#10199 In QwenLM/qwen-code;security: static loader environment assignments can bypass concrete Bash allow rules
category/securitySecurity and privacySecurity and privacypriority/P1High priority issueHigh priority issuescope/shellShell command executionShell command executionscope/vulnerabilitySecurity vulnerabilitiesSecurity vulnerabilitiesstatus/ready-for-humanSpecified but requires human judgment to implement; not suitable for an autonomous agentSpecified but requires human judgment to implement; not suitable for an autonomous agenttype/bugSomething isn't working as expectedSomething isn't working as expectedStatus: Open.#10197 In QwenLM/qwen-code;Variable-expanded shell redirects can bypass explicit Write deny rules through Bash allow rules
category/securitySecurity and privacySecurity and privacypriority/P1High priority issueHigh priority issuescope/shellShell command executionShell command executiontype/bugSomething isn't working as expectedSomething isn't working as expectedStatus: Open.#10196 In QwenLM/qwen-code;qwen3.8-flash is treated as text-only; alibabaStandard preset carries no modality metadata
category/coreCore engine and logicCore engine and logicpriority/P2Medium - Moderately impactful, noticeable problemMedium - Moderately impactful, noticeable problemtype/bugSomething isn't working as expectedSomething isn't working as expectedStatus: Open.#10194 In QwenLM/qwen-code;security: incomplete #8575 fix allows Git diff drivers to execute commands without approval
category/securitySecurity and privacySecurity and privacypriority/P2Medium - Moderately impactful, noticeable problemMedium - Moderately impactful, noticeable problemscope/shellShell command executionShell command executiontype/bugSomething isn't working as expectedSomething isn't working as expectedStatus: Open.#10193 In QwenLM/qwen-code;security: Bash allow rules can be bypassed by command substitution hidden in leading environment assignments
category/securitySecurity and privacySecurity and privacypriority/P1High priority issueHigh priority issuescope/shellShell command executionShell command executionscope/vulnerabilitySecurity vulnerabilitiesSecurity vulnerabilitiesstatus/ready-for-humanSpecified but requires human judgment to implement; not suitable for an autonomous agentSpecified but requires human judgment to implement; not suitable for an autonomous agenttype/bugSomething isn't working as expectedSomething isn't working as expectedStatus: Open.#10192 In QwenLM/qwen-code;- Status: Open.#10191 In QwenLM/qwen-code;
Managed Skill reinstall can delete the existing installation when the final rename fails
category/integrationExternal integrationsExternal integrationspriority/P2Medium - Moderately impactful, noticeable problemMedium - Moderately impactful, noticeable problemscope/extensionsExtension configurationExtension configurationtype/bugSomething isn't working as expectedSomething isn't working as expectedStatus: Open.#10187 In QwenLM/qwen-code;Main CI failed: E2E Tests on 5a883243f4f7
autofix/skipNot eligible for the scheduled autofix agentNot eligible for the scheduled autofix agentstatus/ready-for-agentFully specified; an AFK coding agent can pick this up with no human contextFully specified; an AFK coding agent can pick this up with no human contexttype/bugSomething isn't working as expectedSomething isn't working as expectedStatus: Open.#10186 In QwenLM/qwen-code;- Status: Open.#10185 In QwenLM/qwen-code;
bug(serve): runtime-added model cannot be set as current in Web Shell until daemon restart
category/configurationConfiguration managementConfiguration managementpriority/P2Medium - Moderately impactful, noticeable problemMedium - Moderately impactful, noticeable problemscope/model-switchingModel selection and switchingModel selection and switchingtype/bugSomething isn't working as expectedSomething isn't working as expectedStatus: Open.#10184 In QwenLM/qwen-code;