diff --git a/src/libs/kata-types/src/annotations/mod.rs b/src/libs/kata-types/src/annotations/mod.rs
index e85c64c90f..b37377093f 100644
--- a/src/libs/kata-types/src/annotations/mod.rs
+++ b/src/libs/kata-types/src/annotations/mod.rs
@@ -1154,14 +1154,12 @@ impl Annotation {
                         config.runtime.shared_mounts = serde_json::from_str(value.as_str())?;
                     }
                     KATA_ANNO_CFG_SANDBOX_BIND_MOUNTS => {
-                        let args: Vec<String> = value
-                            .to_string()
-                            .split_ascii_whitespace()
-                            .map(str::to_string)
-                            .collect();
-                        for arg in args {
-                            config.runtime.sandbox_bind_mounts.push(arg.to_string());
-                        }
+                        // Host bind-mount paths are operator-controlled configuration only.
+                        // Never honor them from untrusted workload annotations.
+                        warn!(
+                            sl!(),
+                            "Annotation {} is not permitted from workload annotations", key
+                        );
                     }
                     _ => {
                         warn!(sl!(), "Annotation {} not enabled", key);