macOS 27 does not support CoreStorage volumes
macOS 27 breaks automatic mounting and erasing of CoreStorage volumes, rendering encrypted storage inaccessible.
1
Stories per day · 30 days
2 RSS
Relatedai-agents1anthropic1capability-laundering1coding-agents1corestorage1credentials1layerfs1macos1mcp1model-context-protocol1sandboxes1version-control1
7 stories, newest first · one card per story
Stories tagged #filesystem
LayerFS offers ephemeral workspaces for AI coding agents
Each agent mounts a writable workspace over shared history, commits changes, and unmounts, with content-addressed storage.
My Credentials, Please: Detecting Filesystem Capability Laundering in MCP Servers at Scale
Researchers find filesystem capability laundering in MCP servers, including two CVEs in Anthropic's Git server.
Meta makes the Muse filesystem even more accessible
Meta says Muse's cloud Linux VM filesystem access, including root, is intended.
iceener/files-stdio-mcp-server: sandbox escape in fs_search via a symlinked directory (recursive walker validates only the top level)
iceener/files-stdio-mcp-server allows a read-side sandbox escape: fs_search follows symlinked directories while the recursive walker validates confinement only at the top level.
Survey of filesystem MCP servers: how the "sandboxed filesystem" boundary is enforced (one breach, four defended-by-design)
Survey finds one filesystem MCP server vulnerable to a symlink-based sandbox escape while four others are defended by design.
Security fixes in libfuse-3.18.3
libfuse 3.18.3 disables fuse_session_custom_io() by default to stop non-kernel peers from forging FUSE requests libfuse parses unvalidated.