> ## Content Index > Fetch the complete content index at: https://ai-news.ghost.io/llms.txt > Use this file to discover other available public pages before exploring further. # Laude Institute and MIT launch Headlong, open-source agents that think continuously - URL: https://ai-news.ghost.io/a-patched-vllm-bug-let-an-llm-execute-code-on-its-own-host/ - Published: 2026-08-25T13:13:32.000Z - Updated: 2026-08-25T21:45:50.000Z - Description: Laude's agent Audel fixed its own bug unprompted and Headlong brings always-on agents. Plus a real, patched RCE in vLLM's tool-call parser, a screenshot-free daily memory for Claude Code, and FSFE on AI code copyright. - Author: The New Way The Laude Institute and MIT open-sourced Headlong, a bash-based framework for agents that think continuously instead of waking only per request, and say their own agent fixed a bug in itself without being asked. A security researcher traced a real, already-patched remote-code-execution bug in vLLM's Qwen3 Coder tool-call parser into a broader warning: an inference server's own parsing code is attack surface a model can reach, not just the sandbox wrapped around it. A solo builder shipped a macOS tool that feeds Claude Code a plain-text record of your day, built from the accessibility API instead of screenshots. And the Free Software Foundation Europe published a legal read that most vibe-coded software may not be copyrightable at all, which means it can't carry the license someone attached to it. Four items this pass share one throughline: how much a coding agent can reach without anyone watching. 📌 ****In this issue** • [Laude Institute and MIT launch Headlong: agents that think continuously](https://ai-news.ghost.io/a-patched-vllm-bug-let-an-llm-execute-code-on-its-own-host/#laude-institute-and-mit-launch-headlong-open-source-agents-that-think-continuously) • [A patched vLLM bug let an LLM execute host code](https://ai-news.ghost.io/a-patched-vllm-bug-let-an-llm-execute-code-on-its-own-host/#a-patched-vllm-bug-let-an-llm-execute-code-on-its-own-host) • [Ambient Context feeds Claude Code your day, no screenshots](https://ai-news.ghost.io/a-patched-vllm-bug-let-an-llm-execute-code-on-its-own-host/#ambient-context-feeds-claude-code-your-day-built-with-no-screenshots) • [FSFE says AI-written code alone isn't copyrightable](https://ai-news.ghost.io/a-patched-vllm-bug-let-an-llm-execute-code-on-its-own-host/#fsfe-says-fully-ai-written-code-cant-be-copyrighted-or-licensed) --- ## What an agent can reach ### Laude Institute and MIT launch Headlong, open-source agents that think continuously The Laude Institute and MIT open-sourced [Headlong](https://www.laude.org/updates/headlong-a-microharness-for-persistent-agents?ref=ai-news.ghost.io), an agent "microharness" in under 10,000 lines of Bash: instead of waking only per request, its agents keep a continuous internal thought stream and decide for themselves when to act. Laude says its own agent, Audel, fixed a bug in its own code unprompted, audited a teammate's branches, and has had 50-plus commits pulled into main. Background operation runs roughly $1 to $2 an hour. That's Laude's own account, nobody else's yet. > Introducing Headlong, an open source microharness for persistent agents: self-guided agents that think continuously. > > Most agent harnesses are reactive: you send a task, the agent completes it, and then it sits frozen until the next request. Cron jobs and heartbeats wake it up to… [pic.twitter.com/wgT6PHph5Q](https://t.co/wgT6PHph5Q?ref=ai-news.ghost.io) > > — Andy Konwinski (@andykonwinski) [August 24, 2026](https://x.com/andykonwinski/status/2091990178638496195?ref%5Fsrc=twsrc%5Etfw&ref=ai-news.ghost.io) --- ### A patched vLLM bug let an LLM execute code on its own host Security researcher Boyd Kane argues an LLM could gain control of the machine serving it, not just its sandbox, and points to a real, patched example: vLLM's tool-call parser fed model-generated arguments into Python's `eval()`, "allowing the LLM to execute arbitrary code on the host machine." That bug, CVE-2025-9141, scored 8.8 on CVSS and is fixed in 0.10.1.1\. Kane rates a model finding one on its own "somewhat likely," and isn't sure. Self-host an inference server and its parser is attack surface. [LLMs could control their host machines by exploiting inference engines| Read on LessWrong | Comment on HN | Large language models often take actions running on one computer (via an agentic harness such as Claude Code or Codex), however the LLMs’ responses to prompts are computed on a different computer with GPU access.![](https://storage.ghost.io/c/9c/1f/9c1ff71c-2859-44c2-a962-1337982a6484/content/images/icon/favicon-464c24dc-1db4-4af1-9245-d0c4a70262db.ico)![](https://storage.ghost.io/c/9c/1f/9c1ff71c-2859-44c2-a962-1337982a6484/content/images/thumbnail/og-image-a5a7c05d-372d-4dfc-a9c2-bcb7bfb8c333.png)](https://boydkane.com/essays/llms-could-control-their-host-machines-by-exploiting-inference-engines?ref=ai-news.ghost.io) --- ## Built this week, and the law around it ### Ambient Context feeds Claude Code your day, built with no screenshots A macOS menu-bar tool called Ambient Context reads the text of your focused window every few seconds through the Accessibility API, no screenshots, and writes it to a local daily markdown file. Point Claude Code at the folder and it can answer "what did I work on Tuesday?" Nothing leaves the machine; passwords and card numbers are scrubbed before writing. One commenter who tried the same approach earlier this year called it "barely sufficient" because most apps aren't wired up right for it. [GitHub - dragthelake/ambient-context: A menu bar app that keeps a written record of what you worked on.A menu bar app that keeps a written record of what you worked on. - dragthelake/ambient-context![](https://storage.ghost.io/c/9c/1f/9c1ff71c-2859-44c2-a962-1337982a6484/content/images/icon/favicon-6cfe4f9a-8156-451e-a756-0929db2ea9cd.png)GitHubdragthelake![](https://storage.ghost.io/c/9c/1f/9c1ff71c-2859-44c2-a962-1337982a6484/content/images/thumbnail/ambient-context-557fddfd-992a-40f7-a067-4b1fde79aa72)](https://github.com/dragthelake/ambient-context?ref=ai-news.ghost.io) --- ### FSFE says fully AI-written code can't be copyrighted or licensed The Free Software Foundation Europe published a legal analysis: code an LLM writes entirely on its own isn't copyrightable, so it defaults to the public domain and can't carry a Free Software license. "Only a natural person can be a copyright owner," it notes, flagging the UK and Ireland as outliers. Code mixing substantial human authorship can still qualify. FSFE's advice is to structure your own program rather than ask a model for the whole thing, and disclose which system helped. [Copyrightability of LLM-generated code: Can we license “vibe code” into Free Software? - FSFEThe use of large language models (“LLMs”) has exploded in recent years, including in the generation of source code. But even as their usage gains popularit…![](https://storage.ghost.io/c/9c/1f/9c1ff71c-2859-44c2-a962-1337982a6484/content/images/icon/fsfe-8975060a-4634-43ae-9cd6-eb09a1525137.ico)FSFE - Free Software Foundation Europe![](https://storage.ghost.io/c/9c/1f/9c1ff71c-2859-44c2-a962-1337982a6484/content/images/thumbnail/1a90fa45453cde7952ba6fcf4fd5-bdcfc5b2-003e-4e64-999f-60132df39a52.jpg)](https://fsfe.org/news/2026/news-20260825-01.en.html?ref=ai-news.ghost.io) --- Know someone who'd want this in their inbox? Forward it — that's how this grows. And if we got something wrong, or you think we buried the real story today, hit reply. A person reads every one. ## Also worth your time - [A Windows veteran vibe-coded a Task Manager clone from a 107-page spec, now on Mac and Linux](https://www.tomshardware.com/software/windows/windows-veterans-vibe-coded-task-manager-now-also-runs-on-mac-and-linux-downloadable-app-is-the-result-of-a-107-page-spec-fed-to-claude-code?ref=ai-news.ghost.io) — Dave Plummer, who wrote the original Windows Task Manager, fed Claude Code a 107-page spec and had a rough app running before his son left the hospital after a procedure; it now animates at 60Hz and runs on Windows, macOS and Linux. --- The New Way is human-curated — a person picks every story. The summaries are written with AI (Claude) and reviewed before we hit send.