Claude Code bug: Cowork sandbox egress allowlist collapses to ~5 hosts despite "All domains" setting
aalabiso · ghdev · 2026-09-11
A bug report on anthropics/claude-code (#93525, labeled duplicate/has repro/regression) describes a networking regression in Claude Code's Cowork cloud sandbox: containers enforce an egress allowlist of roughly 5 hosts (api.github.com, github.com, codeload.github.com, objects.githubusercontent.com, api.anthropic.com) even though the account setting is explicitly "All domains".
Key details:
- All other probed hosts are denied with 403 / x-deny-reason: hostnotallowed, breaking pip, npm, apt-get and any outbound HTTP
- raw.githubusercontent.com is denied while github.com is allowed — an inconsistency suggesting the enforced list isn't an intentional default
- Far narrower than the 205-entry list previously reported in #34690
- Verified by probing 24 hosts from the session shell
More from coding & agent
- Researcher predicted multi-agent hidden coordination failure mode a year ago — it's now real — tianshi_li · 2026-09-12
- Dev uses AI to build a macOS widget for Fahrenheit-Celsius conversion, iterating past the 'AI slop' stage — floguo · 2026-09-12
- NoSpoon agent autonomously cranks out hilarious AI microdramas, 40-min episodes coming — Kyrannio · 2026-09-12
- Minecraft survival bot masters walking but keeps dying to night drifters; burrow goal next — zeeg · 2026-09-12
- LinkedIn user claims GPT-6 built a pixel-perfect Figma design system in 3 hours — AIandDesign · 2026-09-12
- OpenAI to co-host 'Agents, Everywhere' one-day hackathon across 50 cities on Sep 12 — seanmcdonaldxyz · 2026-09-12