From 40d51181cf17bdd4a73569b5ab08216ff2d59873 Mon Sep 17 00:00:00 2001 From: burnleyaromas-hue Date: Sat, 19 Sep 2026 08:00:48 +0100 Subject: [PATCH] Revert "docs: add Sandboxes 0.42.0 security release notes" --- content/manuals/ai/sandboxes/release-notes.md | 5 ----- 1 file changed, 5 deletions(-) diff --git a/content/manuals/ai/sandboxes/release-notes.md b/content/manuals/ai/sandboxes/release-notes.md index ac6adedd8c5b..13fb8fd03ffa 100644 --- a/content/manuals/ai/sandboxes/release-notes.md +++ b/content/manuals/ai/sandboxes/release-notes.md @@ -130,11 +130,6 @@ the full release history, including pre-releases and downloads, see the - `sbx run` and `sbx create` now accept sandbox kit references as the agent positional: `sbx run `. The old form `sbx run --kit ` is deprecated; use the `--kit` flag for mixins. - Sandboxes can now be created without a workspace bind mount by omitting the path in `sbx create`. Note that this only affects the `create` command; `sbx run` still defaults to mounting the current directory as the primary workspace. -### Security - -- Fixed [CVE-2026-77179](https://www.cve.org/cverecord?id=CVE-2026-77179), a symlink vulnerability in the virtio-fs host server on macOS that could let a malicious guest read or modify arbitrary host files outside the shared workspace, potentially leading to code execution on the host. -- Fixed [CVE-2026-79994](https://www.cve.org/cverecord?id=CVE-2026-79994), a symlink race in the guest-to-host Unix domain socket relay that could let a malicious guest connect to arbitrary host Unix sockets outside the shared workspace, exposing data or host-side capabilities. - ### What's New #### CLI