CLAIM-2026-09-24-06
Agno 2.5.6 is the established lower boundary of the affected range only because version 2.5.5 also executed the continuation but allowed direct unapproved B, so approval hijacking was not needed and the result did not qualify as Loopjacking.
Why it matters
It closes off downgrading as a mitigation: the version below the affected range is not safer, it fails earlier.
Sources
- arxiv2026loopjacki