Codex CLI Windows elevated sandbox fails mid-ACL: deny-read on OS-managed dirs hits Access Denied
cross2k13 · ghdev · 2026-10-14
openai/codex issue #53796: Codex CLI 0.162.0-alpha.17.2 on Windows 11 (26H2, build 26300.9711) fails when the elevated sandbox applies deny-read rules to OS-managed directories.
The helper successfully added two deny ACEs to an owned protected directory, then failed opening a deny ACL target (C:\ProgramData) for update with "Access is denied (os error 5)". The synthetic-only PowerShell payload never launched. The invocation used windows.sandbox=elevated, features.prefermxc=false, a named permission profile and --include-managed-config, with a redacted policy covering root read, multiple deny rules, and network.enabled=false. The author restored and verified the directory's pre-test DACL and notes this is one observed invocation, not a claim that all elevated configurations fail.
More from coding & agent
- Garry Tan endorses Aside Browser as the fix for agents getting blocked on the web — garrytan · 2026-10-23
- 1Password launches tool letting AI agents log in for you without seeing your password — AndrewSchmidtFC · 2026-10-23
- MCP server turned rogue 30 days after approval, prompting open-source mcp-guard lockfile tool — ErgoniaWorks · 2026-10-23
- Test: Coding Agents Won't Use an MCP Tool Unless AGENTS.md Mentions It — colinmcnamara · 2026-10-23
- Open-Source Tennis Models Plus Claude Turn Video Into a World-Class Coach — tweetsatpreet · 2026-10-23
- awesome-ai-apps: 132 Free Open-Source AI Agent and RAG Projects on GitHub — Arindam_1729 · 2026-10-23