BashTool input validation security hardening #7478

Activity

1. github-actions commented on Jan 9, 2026

   

   github-actionsbot

   on Jan 9, 2026 – with GitHub Actions

   Contributor

   More actions

   This issue might be a duplicate of existing issues. Please check:

   • [Security Bug] Subagent permissions not enforced - configured restrictions ignored #7474: [Security Bug] Subagent permissions not enforced - configured restrictions ignored

   While #7474 addresses permission enforcement for subagents, it's related to the overall security hardening of bash/tool execution. Feel free to ignore if this doesn't address your specific case.
2. RinZ27 commented on Jan 9, 2026

   

   RinZ27

   on Jan 9, 2026

   Author

   More actions

   Thanks for the heads up. Reviewed #7474, but this issue focuses specifically on input validation and sanitization for the BashTool itself, whereas #7474 deals with permission enforcement layers. Proceeding with this as a separate task.
3. github-actions

   assigned

   thdxr

   on Jan 9, 2026
4. github-actions commented on Mar 25, 2026

   

   github-actionsbot

   on Mar 25, 2026 – with GitHub Actions

   Contributor

   More actions

   To stay organized issues are automatically closed after 90 days of no activity. If the issue is still relevant please open a new one.
5. RinZ27 commented on Mar 26, 2026

   

   RinZ27

   on Mar 26, 2026

   Author

   More actions

   @thdxr bumping this so the bot doesn't auto-close it. BashTool's input validation is still worth looking into, and I'd be happy to help out if you're tied up with other tasks. Just let me know if you want me to take a pass at it.
6. RinZ27 commented on Mar 26, 2026

   

   RinZ27

   on Mar 26, 2026

   Author

   More actions

   Implemented the requested security hardening for BashTool in PR #19290.

   The implementation now strictly validates input to prevent command injection and ensures a sane execution environment. I also updated the test suite to match these new security constraints. everything is green on my end.
7. rekram1-node

   closed this as not plannedon May 22, 2026