THREATOPS
THREAT OPSThreat News › [GHSA] GHSA-j659-8xh6-5pq5 (high) — atomic-agents-stack: Parallel helper/delegate batch reserves $0 for models absent from the pricing table, bypassing the cost-cap fan-out guard

[GHSA] GHSA-j659-8xh6-5pq5 (high) — atomic-agents-stack: Parallel helper/delegate batch reserves $0 for models absent from the pricing table, bypassing the cost-cap fan-out guard

medgithub_advisoriesPublished 2026-08-17

GHSA-j659-8xh6-5pq5 Severity: high CVE: None

atomic-agents-stack: Parallel helper/delegate batch reserves $0 for models absent from the pricing table, bypassing the cost-cap fan-out guard

`_estimate_batch_cost` (`atomic_agents/agent.py`) looks up the per-model output price with `PRICING.get(model, {})`, returning 0.0 for any model not in the hardcoded pricing table. `_check_batch_reservation` th

Original source: https://github.com/advisories/GHSA-j659-8xh6-5pq5