nesquena/hermes-webui v0.51.465

on GitHub

Release PZ — workspace null-byte hardening

Fixed

• Remote workspace paths with an embedded null byte are now rejected (#4326). Completes the #4273/#3664 remote-workspace trust-boundary hardening (v0.51.463): _remote_terminal_workspace_candidate fails closed on a \x00 in the candidate path or terminal.cwd, before normalization — previously such a path slipped past the containment check. Thanks @rodboev.