access denied (java.io.FilePermission config.Coldbox read)

I just upgraded to Coldbox 3.5 on Hostek. I ran across a strange
error. The coldbox core Util.cfc was not able to read my config.cfc
because it was in the sandbox. Hostek changed the permissions but that
did not help. The only correction for it was acctually change this in
the core.

I went to the script that was throwing the error and changed:
               var objFile =
createObject("java","java.io.File").init(javaCast("string",arguments.filename));
TO
               var objFile =
createObject("java","java.io.File").init(javaCast("string",expandPath(arguments.filename)));

and that fixed the error.

Is this a bug?

Thanks,

George Murphy