Issues

• Native PSEC launch compatibility with a downstream held-image literal-argv adapter

  Needs-Triage
  microsoft/mxc#1523 · Filter by author vineethsai7 opened on Oct 18, 2026
  3

• Rust SDK: native payload execution with literal argv

  Needs-Triage
  microsoft/mxc#1522 · Filter by author vineethsai7 opened on Oct 18, 2026

• Rust SDK: expose an owned query-only process handle on Windows

  Needs-Triage
  microsoft/mxc#1521 · Filter by author vineethsai7 opened on Oct 18, 2026

• Support privacy-safe caller attribution and invocation correlation

  Issue-FeatureNeeds-Triage
  Feature

  microsoft/mxc#1517 · Filter by author nickwmsft-debug opened on Oct 16, 2026

• [docs] Align README build commands with CONTRIBUTING.md

  Issue-DocsNeeds-Triage
  Task

  microsoft/mxc#1515 · Filter by author MuelNova opened on Oct 16, 2026

• [Seatbelt] Add a built-in proxy to handle CIDR filtering

  Issue-FeatureNeeds-Triage
  Feature

  microsoft/mxc#1513 · Filter by author theelliotm opened on Oct 16, 2026

• bwrap: Add the option to skip the procfs mount

  Issue-FeatureNeeds-Triage
  Feature

  microsoft/mxc#1507 · Filter by author westurner opened on Oct 15, 2026

• Seatbelt: accept loopback-only egress.allow port rules (alongside runtimeConfig.networkProxy)

  Issue-FeatureOS-MacOSPriority2
  Feature

  microsoft/mxc#1506 · Filter by author geuben opened on Oct 15, 2026
  1

• KB5127648 blocks all loopback connections from inside an MXC sandbox, including to the sandbox's own port

  Backend-ProcessContainerIssue-BugOS-WindowsPriority1
  Bug

  microsoft/mxc#1505 · Filter by author seannair opened on Oct 15, 2026
  1

  

• Feature request: per-run resource limits, priority, and CPU accounting

  Issue-FeatureOS-LinuxOS-MacOSOS-Windows
  Feature

  microsoft/mxc#1498 · Filter by author crmne opened on Oct 14, 2026

• BaseContainer: LPAC (processContainer.leastPrivilege) without DACL mutation after the SBOX removal

  Backend-ProcessContainerPriority2
  Bug

  microsoft/mxc#1496 · Filter by author rominf opened on Oct 14, 2026
  

• [Bubblewrap] Sandboxed workloads can create user namespaces; add --disable-userns or a seccomp filter

  Backend-BubblewrapBackend-LXCOS-LinuxPriority2
  Bug

  microsoft/mxc#1495 · Filter by author crmne opened on Oct 14, 2026
  

• [Bubblewrap] platform_support() reports bubblewrap available where bwrap cannot create namespaces, and run() returns bwrap's failure as the workload's exit code

  Backend-BubblewrapOS-LinuxPriority2
  Bug

  microsoft/mxc#1494 · Filter by author crmne opened on Oct 14, 2026
  1

  

• Add some usage examples, such as running Visual Studio Code in isolation to prevent malicious extensions.

  Area-SchemaIssue-Task
  Task

  microsoft/mxc#1492 · Filter by author frostblazergit opened on Oct 14, 2026

• bfs.sys leaks paged pool per ProcessContainer filesystem grant

  Backend-ProcessContainerIssue-BugPriority1
  Bug

  microsoft/mxc#1487 · Filter by author bluecmd opened on Oct 13, 2026
  

• ProcessContainer leaks a SeLs lowbox-number entry per environment

  Issue-BugNeeds-Triage
  microsoft/mxc#1486 · Filter by author bluecmd opened on Oct 13, 2026

• How to set full filesystem access?

  Area-SchemaIssue-Feature
  Feature

  microsoft/mxc#1477 · Filter by author liufuyang opened on Oct 13, 2026

• ProcessContainer: mounted file-backed NTFS granted directory returns Access is denied

  Backend-ProcessContainerPriority2
  Bug

  microsoft/mxc#1473 · Filter by author SEng-Kitathas opened on Oct 12, 2026
  

• Process container: environment creation costs ~1 ms per granted path in GetVolumePathNameW

  Backend-ProcessContainerPriority2
  Bug

  microsoft/mxc#1468 · Filter by author bluecmd opened on Oct 12, 2026
  

• Process container: SetCurrentDirectory into a read-only path fails (FILE_TRAVERSE denied for directory opens)

  Backend-ProcessContainerIssue-BugPriority2
  Bug

  microsoft/mxc#1467 · Filter by author bluecmd opened on Oct 12, 2026
  

• [build] Compile generated Windows version resources with an explicit UTF-8 codepage

  Area-BuildIssue-BugOS-MacOSOS-WindowsPriority3
  Bug

  microsoft/mxc#1466 · Filter by author chogng opened on Oct 11, 2026
  

• BaseContainer: USER32-importing workloads fail with STATUS_DLL_INIT_FAILED from a non-interactive session even with ui.disable=false / isolation=desktop

  Backend-ProcessContainerIssue-DocsOS-WindowsPriority3
  Bug

  microsoft/mxc#1465 · Filter by author bluecmd opened on Oct 11, 2026
  2

  

• ProcessContainer (BaseContainer): GetFinalPathNameByHandleW(VOLUME_NAME_DOS) always fails — Mount Manager unreachable, breaks git's cwd and Node's realpath.native

  Backend-ProcessContainerIssue-BugOS-WindowsPriority2
  Bug

  microsoft/mxc#1464 · Filter by author laurentftech opened on Oct 10, 2026
  2

  

• [WSLC] In-built proxy for networking

  Backend-WSLCIssue-FeatureOS-Windows
  Feature

  microsoft/mxc#1462 · Filter by author SohamDas2021 opened on Oct 10, 2026
  1

  

• PSEC: volume root of a granted path can't be opened for attributes

  Backend-ProcessContainerIssue-BugOS-WindowsPriority2
  Bug

  microsoft/mxc#1461 · Filter by author reflectronic opened on Oct 10, 2026