AIKIDO-2026-176164

TL;DR

The FilesystemBackend and LocalShellBackend implement the glob, grep, and recursive-search tools with fast-glob, which follows symbolic links by default. When these tools scan a directory tree that contains a self-referential directory symlink (for example sub/sub -> .), fast-glob descends into the cycle indefinitely until the operating system raises ELOOP, crashing the tool and the surrounding agent operation. Because symlink following also let enumeration walk outside the intended search root, matched files could be reported and read from outside that root. The fix sets followSymbolicLinks: false on the glob calls and re-includes symlink-to-file entries through explicit stat checks so directory cycles are no longer traversed.