Harness Runtime templates receive an RCE security fix requiring recreation of existing sessions

DigitalOcean Harness Runtime can start a sandbox with no harness in it.

Existing running or paused sessions continue to use the image they were created from, and resuming, checkpointing, or forking a session does not apply the fix.

The environment spec field that selects the adapter is now named harness. The previous name, agent, is still accepted, so existing spec files and Environment Configs work without changes. A spec can set one of the two, but not both.

DigitalOcean Harness Runtime platform templates have been rebuilt to address CVE-2026-111497, a remote code execution vulnerability in the Brotli decoder affecting Node.js and other components.

The following OpenAI models are deprecated from DigitalOcean Inference as of 26 October 2026: o1 o3-mini GPT Image 1