Claude Code bug: Cowork sandbox egress allowlist collapses to ~5 hosts despite "All domains" setting
aalabiso · ghdev · 2026-09-11
A bug report on anthropics/claude-code (#93525, labeled duplicate/has repro/regression) describes a networking regression in Claude Code's Cowork cloud sandbox: containers enforce an egress allowlist of roughly 5 hosts (api.github.com, github.com, codeload.github.com, objects.githubusercontent.com, api.anthropic.com) even though the account setting is explicitly "All domains".
Key details:
- All other probed hosts are denied with 403 / x-deny-reason: hostnotallowed, breaking pip, npm, apt-get and any outbound HTTP
- raw.githubusercontent.com is denied while github.com is allowed — an inconsistency suggesting the enforced list isn't an intentional default
- Far narrower than the 205-entry list previously reported in #34690
- Verified by probing 24 hosts from the session shell
More from coding & agent
- Indie dev hits $12K MRR-month with Skillry by validating before vibe coding — yihui_indie · 2026-10-28
- Anthropic team kills LeetCode interviews: no longer provides signal — soumitrashukla9 · 2026-10-28
- One-person companies are about the org chart, not headcount: humans judge, agents execute — ciguleva · 2026-10-28
- OATs: open-source toolkit turns everyday objects into personality-bearing agents — Stefania_druga · 2026-10-28
- Dev: local coding dropped from 100% to 5% in a year as cloud agents take over — bytebot · 2026-10-28
- Open-sourced 501(c)(FREE): agent-built free back office for US nonprofits — gralston · 2026-10-28