diff --git a/apps/vscode-linuxserver/1.140.0/.env.sample b/apps/vscode-linuxserver/1.140.0/.env.sample
index 39de4699f..1c0647f6b 100644
--- a/apps/vscode-linuxserver/1.140.0/.env.sample
+++ b/apps/vscode-linuxserver/1.140.0/.env.sample
@@ -1,4 +1,4 @@
-CONTAINER_NAME=
+CONTAINER_NAME=vscode-linuxserver
 PANEL_APP_PORT_HTTP=3000
 PANEL_APP_PORT_HTTPS=3001
 CONFIG_PATH=./data/config
diff --git a/apps/vscode-linuxserver/1.140.0/scripts/init.sh b/apps/vscode-linuxserver/1.140.0/scripts/init.sh
index e5658f096..d2b6fe2b4 100755
--- a/apps/vscode-linuxserver/1.140.0/scripts/init.sh
+++ b/apps/vscode-linuxserver/1.140.0/scripts/init.sh
@@ -1,13 +1,18 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
+SCRIPT_DIR="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd -P)"
+VERSION_DIR="$(cd -- "$SCRIPT_DIR/.." && pwd -P)"
+APP_ROOT="$(cd -- "$VERSION_DIR/.." && pwd -P)"
 paths=(
   "${CONFIG_PATH:-./data/config}"
 )
 
-mkdir -p "${paths[@]}"
+mkdir -p -- "${paths[@]}"
 for path in "${paths[@]}"; do
-  case "$path" in
-    ./*|../*) chown -R 1000:1000 "$path" 2>/dev/null || true ;;
+  resolved_path="$(cd -- "$path" && pwd -P)"
+  case "$resolved_path" in
+    "$APP_ROOT"/*) chown -R 1000:1000 -- "$resolved_path" 2>/dev/null || true ;;
+    *) printf '%s\n' 'Skipping recursive ownership outside this app directory.' ;;
   esac
 done
diff --git a/apps/vscode-linuxserver/1.145.3/.env.sample b/apps/vscode-linuxserver/1.145.3/.env.sample
index 39de4699f..1c0647f6b 100644
--- a/apps/vscode-linuxserver/1.145.3/.env.sample
+++ b/apps/vscode-linuxserver/1.145.3/.env.sample
@@ -1,4 +1,4 @@
-CONTAINER_NAME=
+CONTAINER_NAME=vscode-linuxserver
 PANEL_APP_PORT_HTTP=3000
 PANEL_APP_PORT_HTTPS=3001
 CONFIG_PATH=./data/config
diff --git a/apps/vscode-linuxserver/1.145.3/scripts/init.sh b/apps/vscode-linuxserver/1.145.3/scripts/init.sh
index e5658f096..d2b6fe2b4 100755
--- a/apps/vscode-linuxserver/1.145.3/scripts/init.sh
+++ b/apps/vscode-linuxserver/1.145.3/scripts/init.sh
@@ -1,13 +1,18 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
+SCRIPT_DIR="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd -P)"
+VERSION_DIR="$(cd -- "$SCRIPT_DIR/.." && pwd -P)"
+APP_ROOT="$(cd -- "$VERSION_DIR/.." && pwd -P)"
 paths=(
   "${CONFIG_PATH:-./data/config}"
 )
 
-mkdir -p "${paths[@]}"
+mkdir -p -- "${paths[@]}"
 for path in "${paths[@]}"; do
-  case "$path" in
-    ./*|../*) chown -R 1000:1000 "$path" 2>/dev/null || true ;;
+  resolved_path="$(cd -- "$path" && pwd -P)"
+  case "$resolved_path" in
+    "$APP_ROOT"/*) chown -R 1000:1000 -- "$resolved_path" 2>/dev/null || true ;;
+    *) printf '%s\n' 'Skipping recursive ownership outside this app directory.' ;;
   esac
 done
diff --git a/apps/vscode-linuxserver/latest/.env.sample b/apps/vscode-linuxserver/latest/.env.sample
index 39de4699f..1c0647f6b 100644
--- a/apps/vscode-linuxserver/latest/.env.sample
+++ b/apps/vscode-linuxserver/latest/.env.sample
@@ -1,4 +1,4 @@
-CONTAINER_NAME=
+CONTAINER_NAME=vscode-linuxserver
 PANEL_APP_PORT_HTTP=3000
 PANEL_APP_PORT_HTTPS=3001
 CONFIG_PATH=./data/config
diff --git a/apps/vscode-linuxserver/latest/scripts/init.sh b/apps/vscode-linuxserver/latest/scripts/init.sh
index e5658f096..d2b6fe2b4 100755
--- a/apps/vscode-linuxserver/latest/scripts/init.sh
+++ b/apps/vscode-linuxserver/latest/scripts/init.sh
@@ -1,13 +1,18 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
+SCRIPT_DIR="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd -P)"
+VERSION_DIR="$(cd -- "$SCRIPT_DIR/.." && pwd -P)"
+APP_ROOT="$(cd -- "$VERSION_DIR/.." && pwd -P)"
 paths=(
   "${CONFIG_PATH:-./data/config}"
 )
 
-mkdir -p "${paths[@]}"
+mkdir -p -- "${paths[@]}"
 for path in "${paths[@]}"; do
-  case "$path" in
-    ./*|../*) chown -R 1000:1000 "$path" 2>/dev/null || true ;;
+  resolved_path="$(cd -- "$path" && pwd -P)"
+  case "$resolved_path" in
+    "$APP_ROOT"/*) chown -R 1000:1000 -- "$resolved_path" 2>/dev/null || true ;;
+    *) printf '%s\n' 'Skipping recursive ownership outside this app directory.' ;;
   esac
 done