test(sandbox): add root bind mount regression

2026-02-24 00:17:03 +00:00 · 2026-02-24 00:17:03 +00:00 · 8dfa33d373
commit 8dfa33d373
parent d68380bb7f
1 changed files with 5 additions and 0 deletions
--- a/src/agents/sandbox/validate-sandbox-security.test.ts
+++ b/src/agents/sandbox/validate-sandbox-security.test.ts
@ -47,6 +47,11 @@ describe("validateBindMounts", () => {

  it("blocks dangerous bind source paths", () => {
    const cases = [
+      {
+        name: "host root mount",
+        binds: ["/:/mnt/host"],
+        expected: /blocked path "\/"/,
+      },
      {
        name: "etc mount",
        binds: ["/etc/passwd:/mnt/passwd:ro"],