Sandbox denies path resolution

“The Windows desktop Work/Codex sandbox denies native Windows path resolution even for newly created files inside its authorized writable workspace.”

Is this your bug? What gets counted gets fixed. Pile on.

Paste this into your agent. It files your report, with your error and version.

I hit this bug: rapsheet.dev/sheets/codex/issues/9236/file
Follow it to file my report. Show me the text before you send.

No install. No account. Public and anonymous. The link asks your agent for one report, nothing else. What it sends

Growing. 1 report or thumbs-up in the last 7 days and none the week before, down from 4 a week at the early-October peak. A workaround is known.

Native path resolution denied inside Windows sandbox. Realpath calls fail with EPERM or WinError 5 while opening, reading and stat of the same files succeed.

Is this your bug?

File my report

Where: Windows sandbox
Error text: PermissionError: [WinError 5] Access is denied
Versions: 0.162.0-alpha.2 to 26.1007.21434
Platforms: Windows
How bad: Breaks a normal workflow.

Part of: Workspace file access denied in sandbox4 bugs

Browser client realpath EPERM4 people
Nested folder writes denied2 people
Existing files denied write access2 people

Not quite your bug?

Windows sandbox setup fails validating long cua_node runtime paths11 people
Sandbox setup refresh fails308 people
Sandbox setup lock failure12 people

Original reports6, newest first

Nov 2, 2026Windows Codex child: GetFinalPathNameByHandleW returns ERROR_ACCESS_DENIED after successful CreateFileWOn GitHub#59035
Oct 13, 2026Windows AppContainer: EPERM when loading browser-client.mjsOn GitHub#53638
Oct 9, 2026Windows desktop: Python Path.resolve(strict=True) fails with WinError 5 despite successful file readsOn GitHub#52639
Oct 9, 2026Windows sandbox: native realpath returns EPERM inside writable workspaceOn GitHub#52593
Oct 8, 2026Windows sandbox: Path.resolve(strict=True) fails with WinError 5 in default execution, succeeds in approved outside executionOn GitHub#51989
Sep 16, 2026CODEX_HOME fails to load inside a Windows AppContainer/lowbox — find_codex_home()'s canonicalize() needs \GLOBAL?? DOS-drive-letter access the sandbox deniesOn GitHub#45871