All issues

Search results

Secure mode never gives apply-seccomp CAP_SYS_ADMIN: --cap-drop ALL empties the bounding set, so the nested-userns fallback cannot work

Status: Open.

#498 In anthropic-experimental/sandbox-runtime;

· timkuijsten opened on Aug 27, 2026

Loopback rule does not match the IPv4-mapped form ::ffff:127.0.0.1, breaking dual-stack clients (gRPC)

Status: Open.

#494 In anthropic-experimental/sandbox-runtime;

· davidjdixon opened on Aug 23, 2026

tls-terminate-proxy crashes the process (ERR_INVALID_CHAR) on a non-latin1 response header

Status: Open.

#490 In anthropic-experimental/sandbox-runtime;

· onesuper opened on Aug 22, 2026

filterRequest updates can remain stale on established TLS tunnels

Status: Open.

#487 In anthropic-experimental/sandbox-runtime;

· StellarRequiem opened on Aug 21, 2026

Support path-prefix for allowedDomains entries

Status: Open.

#468 In anthropic-experimental/sandbox-runtime;

· JosephSalisbury opened on Aug 13, 2026

Bug: the mux front-end TCP port is shared across Node cluster workers, violating srt's own per-process proxy model → intermittent 407 in restricted mode

Status: Open.

#458 In anthropic-experimental/sandbox-runtime;

· Designerxsh opened on Aug 10, 2026

srt-win acl stamp is deterministically ~30s/path when the parent directory is a Windows system-managed directory (user profile root, %TEMP%) — breaks Windows sandbox initialize()

Status: Open.

#457 In anthropic-experimental/sandbox-runtime;

· Julyscheme opened on Aug 9, 2026

Linux: allowWrite nested inside an allowRead carve-out under denyRead is silently read-only (mount-order bug in pushReadDenyDirMounts)

Status: Open.

#446 In anthropic-experimental/sandbox-runtime;

· simple10 opened on Aug 5, 2026

Unknown top-level config keys are silently ignored, so a typo'd denyWrite fails open with no warning

Status: Open.

#434 In anthropic-experimental/sandbox-runtime;

· pearson-tfl opened on Aug 4, 2026

macOS: location-independent deny globs (denyWrite, denyRead, mandatory deny) are silently anchored to process.cwd() and not enforced outside it

Status: Open.

#432 In anthropic-experimental/sandbox-runtime;

· madonoharu opened on Aug 4, 2026

srt blocks hw.optional.neon, so Qt apps abort on Apple Silicon

Status: Open.

#430 In anthropic-experimental/sandbox-runtime;

· queglay opened on Jul 29, 2026

apply-seccomp aborts on Ubuntu: AppArmor denies CAP_SYS_ADMIN to bwrap children, so no sandboxed command can run

Status: Open.

#429 In anthropic-experimental/sandbox-runtime;

· dorrogeray opened on Jul 28, 2026