Affected version
Reports that share this version, grouped in one feed.
With default settings, ToolRetryMiddleware retries all tools on ambiguous transport errors (e.g., httpx.ReadTimeout) that may have already committed external effects, leading to duplicate irreversible side effects. After exhausting retries, it instructs the model to 'Please try again,' compounding the risk.
PIIMiddleware's state hooks scan only the most recent message of each type, so PII in earlier human messages, tool results, or assistant messages is passed to the model unredacted and 'block' strategy does not raise. This can leak sensitive data when history is supplied by external systems or multi-agent handoffs.
SummarizationMiddleware invokes the summary model directly inside its before_model hook, bypassing the agent middleware pipeline. This means PIIMiddleware (including strategy='block') never inspects or redacts the summary prompt, allowing PII such as email addresses to be sent to an external summarization provider silently. The issue occurs regardless of middleware ordering in the affected versions unless external sanitization is added.