10 people reported
All time, since Sep 14.
Sandbox fails at deny-read ACLs
“Read-only shell commands and Computer Use trusted-Node startup fail during sandbox setup, before the requested operation executes.”
Is this your bug? What gets counted gets fixed. Pile on.
Paste this into your agent. It files your report, with your error and version.
I hit this bug: rapsheet.dev/sheets/codex/issues/11144/file Follow it to file my report. Show me the text before you send.
No install. No account. Public and anonymous. The link asks your agent for one report, nothing else. What it sends
Windows sandbox setup fails at apply deny-read ACLs. deny_read_acl_state.json contains 22 null bytes, so shell commands, browser-control tools and Computer Use fail before running.
Is this your bug?
File my report- Where
- Windows sandbox
- Error text
Failed to create unified exec process: helper_unknown_error: apply deny-read ACLssetup error: apply deny-read ACLsPasted in 2 reports- Versions
- 26.917.9434.0 to 26.1002.51308
- Platforms
- Windows
- How bad
- Stops work: a core feature can't be used. Some reports say it blocks them completely.
Part of: Windows sandbox setup blocks commands18 bugs
- Sandbox setup refresh fails308 people
- Setup refresh error blocks commands23 people
- Sandbox setup lock failure12 people
- Split writable root sandbox failure3 people
- Sandbox fails on WSL UNC paths4 people
- Windows sandbox setup fails validating long cua_node runtime paths11 people
- Windows setup stops without UAC3 people
- Sandbox ACL update failure2 people
- Sandbox ACL refresh fails2 people
- Managed networking sandbox error2 people
Show all 17Show only the largest 10
- Sandbox refresh fails on old runtime2 people
- Sandbox fails on Google Drive2 people
- Sandbox provisioning failed2 people
- Windows sandbox provisioning fails3 people
- Windows sandbox setup access denied2 people
- Root read access sandbox error12 people
- Shell and Node tools fail with MXC 0x80070020 on Windows2 people
Original reports11, newest first
- Windows elevated sandbox startup blocked by 22-NUL-byte deny_read_acl_state.jsonOn GitHub#52859
- Windows sandbox fails before every shell command: deny_read_acl_state.json contains null bytesOn GitHub#51605
- Windows elevated sandbox startup blocked by 22-NUL-byte deny_read_acl_state.jsonOn GitHub#51424
- Windows: exec-server fails before command start with
helper_unknown_error: apply deny-read ACLsafter successful sandbox setupOn GitHub#51002 - Windows agent sandbox - Windows browser-control and file-reading tools failOn GitHub#50918
- Windows sandbox fails: apply deny-read ACLsOn GitHub#50490
- Windows: summer 2026 occurrence of elevated sandbox failure at
apply deny-read ACLsOn GitHub#49197 - Windows sandbox fails on corrupted deny_read_acl_state.json; Computer Use cannot startOn GitHub#48427
- Windows sandbox setup fails when deny_read_acl_state.json contains null bytesOn GitHub#48094
- Windows sandbox startup and elevated setup fail when deny-read ACL state is zero-filledOn GitHub#47950
Show all 11Show only the newest 10
- Windows desktop: repeated exec_command startup failure at 'apply deny-read ACLs'On GitHub#45498