Replit Adds Cloud Agents: VibeBuilder Weekly, Nov 2
Replit adds Cloud Agents and GPT-6.1 Terra, researchers flag bugs in five AI coding tools, and events through early December.
TL;DR
1Replit announced Cloud Agents for company codebases (Enterprise), plus a new model and chat-to-chat messaging for Agent, on Oct 30.
2Researchers reported flaws in the built-in browsers of five AI coding tools, some still unpatched as of Oct 29.
3We saw no verified pricing changes this week, so keep an eye on your own plan page.
Top Story: Replit Adds Cloud Agents
On Oct 30, Replit's changelog described Cloud Agents for Enterprise customers. You describe a change in plain language. The agent finds the relevant code, edits it, tests it in the running app, and opens a pull request (a proposed change) on GitHub or GitLab. Replit says the work runs in isolated cloud sandboxes and that engineers review changes before anything ships.
The same entry says Agent can now send messages to other chats or start new ones, so you no longer copy and paste prompts between conversations. It also says GPT-6.1 Terra is now in the model selector for Agent in Power Mode.
Why it matters to beginners: the review step is the useful idea. Even when an AI makes the edit, a person looks at it before it goes live. Copy that habit on your own projects, and check what changed before you publish.
Why it matters to business owners: Cloud Agents is listed for Enterprise, so most small teams cannot use it yet. It shows where the tools are heading, which is AI making small fixes to an existing app while your team approves them. If you hire a developer or agency, ask whether they use a review step like this.
Plans and Pricing
1Replit says it added GPT-6.1 Terra to the model selector for Agent in Power Mode (Platform plans). Replit's entry mentions no price change.
2Replit says Agent messaging and chat creation is available on Platform, Pro and Enterprise plans.
3Replit lists Cloud Agents as an Enterprise feature.
4Anthropic's Claude Code release notes for version 2.1.312 (Oct 27) say the "session limit" message was renamed "5-hour limit." Per those notes, this is a wording change, not a new limit.
Not Seen This Week
We did not verify any new pricing, credit, or plan changes dated Oct 26 to Nov 2 for Lovable, Cursor, Base44, or Windsurf. The newest entries we could read on Lovable's changelog were dated Oct 21, and Base44's were dated Oct 22. Windsurf's and Cursor's notes in the window were bug fixes only.
Security Watch
1The Register reported on Oct 29 that Forever Security found flaws in five AI coding tools: Cursor, GitHub Copilot, Claude Desktop, Codex, and VS Code. The researchers say the problems come from embedded browsers. Cursor's was patched Oct 1 without an advisory, according to the report. Researchers say the Codex and VS Code issues were unpatched, and OpenAI says it is working on a fix.
2What to do: update your coding tools regularly, and do not open unknown links or files inside an AI coding tool. Keep API keys out of your project files.
Try This Week
1Open the model picker in your main builder tool and compare two models on the same small task. Note which one you prefer.
2Before you publish, read the list of changed files or the diff. Ask the AI to explain anything you do not understand.
3Check that your coding tools are updated to the latest version, then search your project for pasted passwords or API keys.
Events: Next 30 Days
Nov 4-5: Hands-On Code Generation with Claude Bootcamp, online (listed on vibecodinghackathon.com)
Nov 5-6: Claude Code Mastery Training by Xebia, Amsterdam, in person
Nov 16-20: VibeKode Berlin 2026, Berlin, in person (expo Nov 18-19)
Nov 30-Dec 1: Claude Code Mastery Training by Xebia, Hilversum, in person
Lovable community events: dates were not visible on the events page this week, so check it directly.
Join the Conversation
Join the free VibeBuilder Facebook group at facebook.com/groups/1113060757712466 to share what you are building and ask questions. Subscribe to the newsletter at vibebuilder.space to get this roundup every Monday.
Sources
Replit changelog, Oct 30 2026: docs.replit.com/updates/2026/10/30/changelog
The Register, Oct 29 2026: theregister.com/security/2026/10/29/researchers-find-bugs-in-5-ai-developer-tools-with-openai-and-microsoft-flaws-still-unpatched/5306508
Claude Code release summary via Releasebot: releasebot.io/updates/anthropic/claude-code
Windsurf release summary via Releasebot: releasebot.io/updates/windsurf
Cursor changelog: cursor.com/changelog
Base44 product changelog: docs.base44.com/changelog/product
Lovable changelog: docs.lovable.dev/changelog
Vibe coding events listing: vibecodinghackathon.com
Originally reported by VibeBuilder Space
Read the originalMore news
4 days left: How TechCrunch Founder Summit helps you make more useful connections to scale
TechCrunch is promoting its upcoming Founder Summit in Boston, focusing on structured networking for early-stage startup leaders.
Source: TechCrunch AI
Backdoors in official Claude Code extensions
Security researchers are examining potential vulnerabilities in developer extensions for Anthropic's Claude Code tool.
Source: Hacker News: Claude Code
Backdoor in Claude Code for VS Code extension on the Cursor Marketplace
Security researchers found a malicious backdoor in specific versions of the Claude Code extension distributed on the Cursor Marketplace.
Source: Hacker News: Claude Code
Weekly vibe-coding tips — coming soon
We're getting this ready. Leave your email and we'll let you know the moment it launches. No fluff, unsubscribe whenever.