Codex Windows sandbox bug: native realpath returns EPERM inside writable workspace
sidewaystwo-creator · ghdev · 2026-10-09
Issue #52593 on openai/codex reports a Windows desktop sandbox bug: native path resolution is denied even for newly created files inside the authorized writable workspace.
- fs.realpathSync.native() throws EPERM (errno -4048); a Windows API probe shows GetFinalPathNameByHandleW returns ERRORACCESSDENIED (Win32 5), though opening the same file succeeds; non-native realpath works fine
- Impact: Vitest can't collect seven test suites and TypeScript dependency resolution fails; identical probes and 39 tests pass with narrowly approved execution outside the sandbox
- A separate boundary-sensitive SQLite WAL issue was also reproduced: an active WAL database outside writable roots fails with SQLite error 14
- Full repro steps with a Node.js probe script; no durable fix yet
Versions: ChatGPT desktop Windows 26.1002.7124.0, Codex CLI 0.162.0-alpha.2, Windows 11 25H2.
More from coding & agent
- Ethan Mollick's new book charts 30 months of AI progress, from cyborg to conjurer work — rseroter · 2026-10-23
- OpenJet claims Qwen3.8-27B coding runs 1.9x faster than llama.cpp on one RTX 3090 — JeremyCMorgan · 2026-10-23
- Jensen Huang details Vera Rubin agentic stack: NVL72, MGX, CMX and RTX — rohanpaul_ai · 2026-10-23
- Building an autonomous SEO agent in Hermes with three skills: programmatic pages, Keywords Everywhere, DataForSEO — EXM7777 · 2026-10-23
- Building a sports betting AI agent with onchain execution and human approval by default: architecture and lessons — Dry-Comfortable-2678 · 2026-10-23
- Capy 0.5.0 lets Claude Pro/Max subscribers reuse their plan quota, adds OIDC cloud access — garrytan · 2026-10-23