Cairn
NousResearch/hermes-agent

Sanitize and validate terminal workdir before Docker exec

Cluster 4669 · environments. Data as of

Nothing open on GitHub. Fix attempted, not merged.

The short answer

0open issues
0open PRs
3items grouped
Known?
Yes. 3 related items grouped here, 1 issue already closed.
Fix event
No fix has been merged to main. 2 PRs closed without merging; see the attempts below.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
Nothing open on GitHub.

These issues and PRs address a bug where an invalid or unsafe working directory value could be passed through to Docker's exec or run commands, bypassing configured terminal CWD settings. The work focuses on input validation and sanitization of the workdir parameter in terminal tool backends.

Open issues0

No open issues.

Open PRs0

No open pull requests.

2 PRs closed without merging

From the close comments: done elsewhere 1 · other 1

  • #4731 fix(tools): validate per-call workdir and preserve resolved TERMINAL_CWD · done elsewhere → #4672, #11029, #4669, #5620
  • #4978 fix: validate per-call workdir before passing to docker exec · other → #5629
Closed issues · 1
  • Closed#4669[Bug]: terminal tool passes invalid workdir to Docker exec and overrides configured terminal.cwd
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
environments
Closed issues
1
Attempts
2 PRs closed without merging

For your agent

The same facts, typed.

cluster/4669.json
cluster/4669.md