Datasette-llm demo site model restriction bug fixed

A bug in datasette-llm caused the agent.datasette.io demo site to allow access to LLM models outside the configured allowed list; the issue was fixed in release 0.1a10.

Disclosed 4 November 2026 · Record updated 4 November 2026

Impact

A demo site briefly exposed access to LLM models beyond those specified in its configuration; no indication of broader user impact.

Our coverage

A robot's outstretched arm, meant to grasp only red spheres from a locked cage, suddenly retracts after someone repairs its wiring—other colored spheres tumble safely back inside.

Vendors

Datasette fixes model restriction bug on agent demo site

A release note dated 4 November 2026 says datasette-llm 0.1a10 corrects a fault that let the agent.datasette.io demo reach models outside its configured list.

4 Nov 2026

Sources

simonwillison.nethttps://simonwillison.net/2026/Nov/4/datasette-llm