AIKIDO-2026-305363

TL;DR

In the ai package, tool-call parsing, execution, and approval collection resolve tool and approval names with plain property lookups, so a model- or client supplied name such as constructor, toString, valueOf, or __proto__ resolves to an inherited Object.prototype value instead of undefined. Such names can evade the intended "unknown tool" and "unconfigured approval" checks, letting a matching tool call proceed without the validation or human-in-the-loop approval the application configured. The fix replaces the lookups with Object.hasOwn own-property checks and null-prototype maps across tool-call parsing, execution, and approval collection.