diff --git a/charts/image-loader/values.yaml b/charts/image-loader/values.yaml
index 66ac4daa..7ca72f14 100644
--- a/charts/image-loader/values.yaml
+++ b/charts/image-loader/values.yaml
@@ -1,3 +1,4 @@
+# Agent-server image the loader pre-pulls onto nodes; keep tag in sync with the sandbox runtime.
 image:
   repository: ghcr.io/openhands/agent-server
   tag: 1.28.0-python
diff --git a/replicated/openhands.yaml b/replicated/openhands.yaml
index 1ce6d484..893a631d 100644
--- a/replicated/openhands.yaml
+++ b/replicated/openhands.yaml
@@ -314,7 +314,8 @@ spec:
         CPU_LIMIT: 'repl{{ ConfigOption "sandbox_cpu_limit" }}'
         LOG_LEVEL: 'repl{{ ConfigOption "log_level" }}'
         ADDITIONAL_CONFIGMAPS: "openhands-ca-bundle:/etc/openhands/ca-bundle"
-        ADDITIONAL_HOST_PATHS: 'repl{{ ConfigOption "sandbox_additional_host_paths" }}'
+        # Textarea is "one per line"; normalize to a comma list so a multiline value isn't YAML-folded into a space-joined token.
+        ADDITIONAL_HOST_PATHS: 'repl{{ $hp := list }}repl{{ range $raw := splitList "\n" (ConfigOption "sandbox_additional_host_paths" | replace "\r" "\n") }}repl{{ $e := trim $raw }}repl{{ if $e }}repl{{ $hp = append $hp $e }}repl{{ end }}repl{{ end }}repl{{ $hp | join "," }}'
         SANDBOX_KVM_ENABLED: 'repl{{ ConfigOptionEquals "sandbox_kvm_enabled" "1" }}'
         KVM_DEVICE_RESOURCE: "smarter-devices/kvm"
       kvm: