[Bug] Unable to process request - insufficient context provided

Resolved 💬 2 comments Opened Jun 10, 2026 by notwin Closed Jun 14, 2026

Bug Description

Environment Info

  • Platform: darwin
  • Terminal: ghostty
  • Version: 2.1.170
  • Feedback ID: 54aa6fdf-8132-4232-a3ee-e379fc6abdfe

Errors

[]

Session Summary

My analysis concluded this was most likely a prompt-injection attack:
fabricated/injected instructions (disguised as the user, plus
commands appended to message tails like the "no apology, resume"
directive) attempting to make the AI read/exfiltrate the user's
private Feishu data. Evidence: task appeared from nowhere, targeted
private data, message-tail injected directives, repeated across
sessions (user says 2nd time), accompanied by garbled/cross-talking
tool output and a spurious ScheduleWakeup.

Investigation findings (metadata-only, to avoid re-poisoning):
Project-local .ccb/.omc are stale (frozen 2026-03-18). The active
suspect is ~/.omc — modified today (06-10), writing
agent-replay-*.jsonl, hud-stdin-cache.json, hud-state.json, etc. .ccb
bridges multiple AI CLIs
(.claude-session/.gemini-session/.codex-session/.opencode-session).
This middleware "relay" layer is the most plausible injection vector
(not proven). I did NOT read file contents (risk of re-injection).

View original on GitHub ↗

This issue has 2 comments on GitHub. Read the full discussion on GitHub ↗