Issues

• ProcessContainer exact write grant for an absent file is dropped before BFS registration

  Issue-BugNeeds-TriageOS-Windows
  Bug

  microsoft/mxc#1555 · Filter by author r7games-art opened on Oct 21, 2026

• ProcessContainer proxy mode blocks allowed host-to-container loopback ingress

  Issue-BugNeeds-TriageOS-Windows
  Bug

  microsoft/mxc#1551 · Filter by author MGudgin opened on Oct 21, 2026
  

• [.NET SDK] NativeLibraryResolver prints a misleading "falling back to the default loader" warning when the host already registered a resolver

  Issue-BugOS-Windows
  microsoft/mxc#1549 · Filter by author paulcam206 opened on Oct 21, 2026
  

• Windows sandbox fails for workspaces on folder-mounted volumes

  Needs-Triage
  microsoft/mxc#1548 · Filter by author dileepyavan opened on Oct 21, 2026

• [Bubblewrap] Resolve required sandbox tools using inherited PATH plus standard system-directory fallbacks

  Issue-BugNeeds-TriageOS-Linux
  microsoft/mxc#1545 · Filter by author dileepyavan opened on Oct 21, 2026

• Expose inherit console option on SDK

  Issue-FeatureNeeds-Triage
  Feature

  microsoft/mxc#1544 · Filter by author AndreaVielCGN opened on Oct 21, 2026

• [docs] Explain the macOS 15 floor for Seatbelt and which Windows hosts get ProcessContainer

  Issue-DocsNeeds-Triage
  microsoft/mxc#1543 · Filter by author SunflowersLwtech opened on Oct 21, 2026

• Remove macOS and Linux binaries from the built npm package

  Area-Node-SDKIssue-Task
  Task

  microsoft/mxc#1537 · Filter by author bbonaby opened on Oct 20, 2026
  

• Windows BaseContainer: files outside explicit filesystem grants remain readable - clarify baseline access or strict allowlisting support

  Issue-FeatureNeeds-Triage
  Feature

  microsoft/mxc#1533 · Filter by author liufuyang opened on Oct 20, 2026

• Documentation: Bounded process-tree termination and settlement guarantees

  Issue-DocsNeeds-Triage
  Task

  microsoft/mxc#1532 · Filter by author DalekPierce opened on Oct 20, 2026

• Rust SDK: document and expose Seatbelt descendant teardown guarantees

  Issue-FeatureOS-MacOS
  microsoft/mxc#1527 · Filter by author vineethsai7 opened on Oct 19, 2026
  1

  

• Bubblewrap sandbox can die when its spawning thread exits

  Backend-Bubblewrap
  microsoft/mxc#1525 · Filter by author keithmattix opened on Oct 19, 2026
  

• Native PSEC launch compatibility with a downstream held-image literal-argv adapter

  Needs-Triage
  microsoft/mxc#1523 · Filter by author vineethsai7 opened on Oct 18, 2026
  3

• Rust SDK: native payload execution with literal argv

  Needs-Triage
  microsoft/mxc#1522 · Filter by author vineethsai7 opened on Oct 18, 2026

• Rust SDK: expose an owned query-only process handle on Windows

  Needs-Triage
  microsoft/mxc#1521 · Filter by author vineethsai7 opened on Oct 18, 2026

• Support privacy-safe caller attribution and invocation correlation

  Issue-FeatureNeeds-Triage
  Feature

  microsoft/mxc#1517 · Filter by author nickwmsft-debug opened on Oct 16, 2026

• [docs] Align README build commands with CONTRIBUTING.md

  Issue-DocsNeeds-Triage
  Task

  microsoft/mxc#1515 · Filter by author MuelNova opened on Oct 16, 2026

• [Seatbelt] Add a built-in proxy to handle CIDR filtering

  Issue-FeatureNeeds-Triage
  Feature

  microsoft/mxc#1513 · Filter by author theelliotm opened on Oct 16, 2026

• bwrap: Add the option to skip the procfs mount

  Issue-Feature
  Feature

  microsoft/mxc#1507 · Filter by author westurner opened on Oct 15, 2026
  

• Seatbelt: accept loopback-only egress.allow port rules (alongside runtimeConfig.networkProxy)

  Issue-FeatureOS-MacOSPriority2
  Feature

  microsoft/mxc#1506 · Filter by author geuben opened on Oct 15, 2026
  1

• KB5127648 blocks all loopback connections from inside an MXC sandbox, including to the sandbox's own port

  Backend-ProcessContainerIssue-BugOS-WindowsPriority1
  Bug

  microsoft/mxc#1505 · Filter by author seannair opened on Oct 15, 2026
  1

  

• Feature request: per-run resource limits, priority, and CPU accounting

  Issue-FeatureOS-LinuxOS-MacOSOS-Windows
  Feature

  microsoft/mxc#1498 · Filter by author crmne opened on Oct 14, 2026
  1

• BaseContainer: LPAC (processContainer.leastPrivilege) without DACL mutation after the SBOX removal

  Backend-ProcessContainerPriority2
  Bug

  microsoft/mxc#1496 · Filter by author rominf opened on Oct 14, 2026
  

• [Bubblewrap] Sandboxed workloads can create user namespaces; add --disable-userns or a seccomp filter

  Backend-BubblewrapBackend-LXCOS-LinuxPriority2
  Bug

  microsoft/mxc#1495 · Filter by author crmne opened on Oct 14, 2026
  

• [Bubblewrap] platform_support() reports bubblewrap available where bwrap cannot create namespaces, and run() returns bwrap's failure as the workload's exit code

  Backend-BubblewrapOS-LinuxPriority2
  Bug

  microsoft/mxc#1494 · Filter by author crmne opened on Oct 14, 2026
  1