… Here are the full patch notes: Fix a complete sandbox escape which leads to host file access and code execution in the host context CVE-2026-34078 Prevent arbitrary file deletion on the host filesystem CVE-2026-34079 Prevent arbitrary read-access to files in the system-helper context GHSA-2fxp-43j9… …
… The string itself became a ROP Return-Oriented Programming chain, a sequence of existing code addresses often referred to as "ROP gadgets" chained together to hijack the execution flow without needing to inject new code. …
… Instead of random, arbitrary names like light.livingroom bulb corner 2, enforce a strict semantic grid. …
… OpenShell uses kernel-level isolation to prevent agents from reading arbitrary paths on the host or persisting changes across runs. …