Cairn
NousResearch/hermes-agent

Docker cold-start sandbox escape fixes

Cluster 54354 · agent. Data as of

3 open items. Fix attempted, not merged.

The short answer

1open issue
2open PRs
4items grouped
Known?
Yes. 4 related items grouped here, 0 issues already closed.
Fix event
No fix has been merged to main. 1 PR closed without merging; see the attempts below.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
1 issue and 2 PRs.

These members address a security vulnerability where tool calls made before a Docker image is fully pulled could execute on the host instead of inside the container, returning local paths. The fixes include blocking the config race condition, anchoring paths in the container, and failing closed when the terminal config bridge is unavailable.

Open issues1

  • Issue#54354[Bug]: Docker backend: first tool call before image is pulled runs on host (returns local paths)

Open PRs2

  • PR#54743fix(file-tools): anchor docker cold-start paths in container
  • PR#61882fix(security): fail closed when terminal config bridge is unavailable

1 PR closed without merging

From the close comments: superseded by another PR 1

  • #54982 fix(security): block Docker cold-start sandbox escape via config race · superseded by another PR → #61882
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.50: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
agent
Closed issues
0
Attempts
1 PR closed without merging

For your agent

The same facts, typed.

cluster/54354.json
cluster/54354.md