Tools
Qwen Code 0.24.4 moves bwrap sandboxing from the whole process to individual tool executions
Two days after adding a bwrap Linux sandbox, qwen-code v0.24.4 (2026-09-22) moves bwrap from wrapping the whole CLI to wrapping each tool execution (#12267). It also adds SSH workspaces that don't need a remote daemon (#12255) and a review feature that records what a plan was computed from and reports drift (#12369). Sandboxing per tool call means the CLI's own network and config access sit outside the sandbox while model-issued commands stay inside it.
Source
↳ Follow the thread