{"repo":"NousResearch/hermes-agent","public_id":"54354","display_label":"Docker cold-start sandbox escape fixes","summary":"These members address a security vulnerability where tool calls made before a Docker image is fully pulled could execute on the host instead of inside the container, returning local paths. The fixes include blocking the config race condition, anchoring paths in the container, and failing closed when the terminal config bridge is unavailable.","subsystem":"agent","counts":{"members":4,"open_issues":1,"open_issues_distinct":1,"open_prs":2,"closed_issues":0,"merged_prs":0,"attempt_prs":3},"landed_fix":null,"resolution":{"state":"unresolved","by":null},"freshness":{"state":"never_verified","last_verified_at":null,"is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.5},"fix_edges":[],"members":[{"kind":"issue","number":54354,"title":"[Bug]: Docker backend: first tool call before image is pulled runs on host (returns local paths)","url":null,"state":"open"},{"kind":"pr","number":54743,"title":"fix(file-tools): anchor docker cold-start paths in container","url":null,"state":"open","close_reason":{"refs":[{"kind":"commit","value":"e9ce25037","number":0},{"kind":"pr","value":"#54354","number":54354}],"category":"uncategorized","implication":"needs_llm"},"merged":false},{"kind":"pr","number":54982,"title":"fix(security): block Docker cold-start sandbox escape via config race","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#61882","number":61882}],"category":"superseded_by_pr","implication":"superseded"},"merged":false},{"kind":"pr","number":61882,"title":"fix(security): fail closed when terminal config bridge is unavailable","url":null,"state":"open","close_reason":{"refs":[{"kind":"commit","value":"a980956cfae2988ab553e10b9ed86161e57fe729","number":0},{"kind":"commit","value":"dc77f2c87f11c4929e151e65396b8f321a1d6a14","number":0}],"category":"superseded_by_pr","implication":"superseded"},"merged":false}],"trust":{"default_tier":"verified","includes_suggested":false}}