Cairn
NousResearch/hermes-agent

Code execution security controls and sandbox isolation

Cluster 41 · agent. Data as of

3 open items. Fix attempted, not merged.

The short answer

1open issue
2open PRs
5items grouped
Known?
Yes. 5 related items grouped here, 1 issue already closed.
Fix event
No fix has been merged to main. 1 PR closed without merging; see the attempts below.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
1 issue and 2 PRs.

These items concern security vulnerabilities and fixes around unrestricted code execution, sandbox isolation (UID, seccomp, network), approval/sudo context enforcement, and related security guidance tooling. A kanban guard fix for open pull requests is also included but is adjacent rather than central.

Open issues1

  • Issue#30101security: code execution sandbox runs with same UID and no seccomp/network isolation

Open PRs2

  • PR#33186feat(plugins): enhance security-guidance with severity tiers, audit tool, and execution coverage
  • PR#65948fix(kanban): only guard open pull requests

1 PR closed without merging

From the close comments: other 1

  • #24962 fix: Phase 1 round 2 — skills approval, session recency, memory conte… · other
Closed issues · 1
  • Closed#41Critical Security Vulnerability: Unrestricted Code Execution in execute_code Tool (Sandbox Bypass)
How this cluster was grouped
  • Link evidence (partly structural links): some members are connected by structural evidence (shared changed files, or a closing/superseded reference); the rest are joined by an automated relevance judgement over their text.
  • Members outside that structural core may belong to a different underlying problem.
  • Pairwise link density 0.34: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
agent
Closed issues
1
Attempts
1 PR closed without merging

For your agent

The same facts, typed.

cluster/41.json
cluster/41.md