vhd restore security

The vhd restore security tag covers a focused WSL security fix in Microsoft’s WSL 2.7.10 release. The update changes how persisted virtual hard disk mounts are restored after the WSL utility virtual machine is recreated. It passes the mounting user’s token during VHD restore, helping prevent a user-controlled VHD path from being re-resolved under the SYSTEM account when the original mount was performed by an ordinary user. This archive is relevant to readers tracking Windows Subsystem for Linux servicing updates, VHD mount behavior, identity and permission boundaries, and practical security hardening in Windows virtualization workflows.