Briefing

LangSmith Sandboxes are Generally Available

ai-dev
CVE-2026-0863 CVE-2026-1470 CVE-2026-31431

Deploy LangSmith Sandboxes to securely run untrusted agent code.

What to do now

Create a sandbox via the LangSmith SDK and test code execution.

Summary

LangSmith Sandboxes entered general availability on 13 May 2026, offering hardware‑virtualized microVMs that are kernel‑isolated from services and other sandboxes. The sandbox platform provides snapshots and cheap copy‑on‑write forks, service URLs for authenticated HTTP access, a sandbox CLI for interactive consoles and file operations, and creator‑private authentication by default. New GA features include automatic pausing of idle sandboxes, allowlist/denylist domain controls, and an auth proxy that injects credentials at the network layer without exposing secrets to the runtime. Sandboxes integrate seamlessly with Deep Agents, Open SWE, LangSmith Deployment, and custom code, enabling agents to run untrusted code, install dependencies, and maintain state across long‑running sessions.

The release addresses security gaps highlighted by recent kernel exploits and supply‑chain attacks, providing true isolation that containers cannot match. Teams can now spin up parallel workloads, snapshot sandboxes from Docker images, and manage sandbox lifecycles entirely through the LangSmith SDK and API key, eliminating the need for separate runtime infrastructure.

Key changes

  • Hardware‑virtualized microVMs kernel‑isolated from services and other sandboxes
  • Snapshots and cheap copy‑on‑write forks for rapid sandbox creation
  • Service URLs for authenticated HTTP access without port forwarding
  • Sandbox CLI for interactive consoles, SSH, SCP, and file operations
  • Creator‑private auth with optional workspace member sharing
  • Auth proxy with custom callbacks for secret injection and domain allowlist/denylist
  • Automatic pausing of idle sandboxes to reduce resource costs

Affects

internal

Customer impact

Analyzing matches…

Ask about this story

Impact on an agency? Which customers? Compare historically Risks of waiting