# NousResearch/hermes-agent · Cross-profile isolation fixes in multiplexed containers

## Open now

- 0 issues, 1 PR open on GitHub.
- PR #101187: fix(docker): refuse cross-profile bind mounts in multiplexed containers

These items address security and correctness issues where Docker volumes, working directories, and backend configs leaked between profiles in multiplexed gateway containers. Fixes enforce per-profile isolation for terminal cwd, Docker configuration, and bind mounts.

## TL;DR

- 3 member(s): 0 open issue(s), 1 closed issue(s), 1 open PR(s), 1 merged PR(s), 0 PR(s) closed without merging.
- A fix was merged to main in PR #101242. Verify it addresses your case.
- **Recommended:** read PR #101242 (and any competing PRs below) before filing. Confirm the merged change covers your symptom.

## Maintainer resolution verdict

- Internal-tracker verdict over this cluster's issue members: `resolved` · deciding PR(s): `pr-101242`. This is distinct from the fix status above. Weigh it yourself.

## How this cluster was grouped

- Link evidence (`STRUCTURAL_SPANNING`): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
- Pairwise link density `0.67`: the share of member pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. `1.00` means every pair is linked.

## Closed / duplicate issues

- #101132: Multiplexed gateway: user-declared docker_volumes and cwd leak across profiles (cross-profile write access)

## Prior & competing PRs

- **#101242: fix(gateway): routed multiplex profiles get their own terminal cwd/backend/docker config; container boot honors config multiplex_profiles (#68559 #85413, salvage #99225 #85437)**. merged to main · fix tier `verified`
  - maintainer direction: category `merged`
  - files: `agent/agent_init.py`, `agent/prompt_builder.py`, `agent/runtime_cwd.py`, `agent/skill_utils.py`, `contributors/emails/[redacted:email]`, `cron/scheduler.py`, `gateway/platforms/base.py`, `gateway/run.py`, `gateway/runtime_footer.py`, `gateway/slash_commands.py`, `hermes_cli/container_boot.py`, `tests/hermes_cli/test_container_boot.py`, `tests/tools/test_terminal_scope_multiplex.py`, `tools/browser_tool.py`, `tools/code_execution_tool.py`, `tools/env_probe.py`, `tools/file_tools.py`, `tools/terminal_scope.py`, `tools/terminal_tool.py`, `tui_gateway/server.py` (+1 more)
- **#101187: fix(docker): refuse cross-profile bind mounts in multiplexed containers**. open
  - maintainer direction: category `implemented_elsewhere`; implication `superseded`; refs `1cd736ff63a`, `#101132`
  - files: `tests/tools/test_docker_cross_profile_mounts.py`, `tools/environments/docker.py`

## Fix status

- Merged to main in PR #101242 (cited above). No release data is tracked. Verify downstream.
- Fix last verified (merged) `2026-09-02`.
- Subsystem: `environments`