Digest / Week of September 7–13, 2026
Claude Code Week in Review — September 7–13, 2026
1,489 new issues filed ·
2,190 resolved in anthropics/claude-code.
Most discussed new issues
- [BUG] Cowork (Windows): all Plan9 shares fail with "Plan9 mount failed: invalid argument" after Windows update KB5124008 (26200.9445) — uninstalling the KB fixes it
- [BUG] Cowork Windows: September 2026 cumulative update breaks Plan9 share attach — device_bash dead on both ARM64 (KB5124012 / 28000.2954) and x64 (KB5124008 / 26200.9445); confirmed by rollback A/B on five machines
- [BUG] Cowork cloud sandbox: egress allowlist collapses to ~5 hosts despite account setting "All domains"
- [BUG] Regression in 2.1.269: dictation-tool paste (clipboard + simulated Ctrl+V) not inserted in VS Code integrated terminal (WSL2) — 2.1.268 works
- [BUG] Cowork: device_commit_files reports success on overwrites but the on-disk content lags exactly one commit behind (silent stale write, fresh mtime)
- [BUG] Claude Desktop (Windows): local MCP tool calls freeze while the session tab is not visible; hosted calls and scheduled tasks unaffected
- [BUG] Cowork local sandbox not mounting after update in Claude Desktop 1.49585.0.0 (Windows)
- Local MCP servers fail with 'Not ready after 60 seconds' even though the remote connection succeeds (shared-pool readiness bug)
- [BUG] Design window renderer grows unbounded during generation and is killed at 2-4GB (macOS, Apple Silicon)
- [BUG] Cowork (macOS): since 2026-09-06 new projects bind ONE folder only ("Use a folder"); Context accepts documents only — silently breaks the multi-folder projects heavy users built on, while the docs still describe the old behaviour
- [BUG] Cowork macOS: local sandbox VM starts with NO network route (only loopback) and cloud egress proxy returns 403 for every domain, despite "Allow network egress: All domains" — regression since 2026-09-10 ~23:15 UTC
- [BUG] Connected folders never mount inside VM — host reports Plan9 share added successfully, guest sees none
- Browser pane: no way to grant persistent site permission — per-action prompts persist despite launchPreviewAllowedOrigins, tool allowlist, and bypassPermissions
- [BUG] Cowork Windows 10 22H2 x64: `sandbox-helper: no Plan9 drive shares mounted` — device_bash dead since 2026-09-08, survives app restart and app update
- [BUG] Claude Code Desktop: session transcripts silently become permanently unavailable (cliSessionId nulled, no local recovery path) — follow-up to anthropics/claude-code#79044
- VSCode extension: session list only allows archive/unarchive, no way to delete a session
- Egress allowlist ignores "All domains": every host outside a built-in list gets 403 on CONNECT (regression 2026-09-10 -> 2026-09-11)
- [BUG] Cowork: VM runtime download leaves .partial and never completes — 'SDK version not verified', survives clean reinstall (Windows, MSIX)
- Remote machine SSH connection fails with "No route to host" due to TCC-disclaimed subprocess lacking Local Network permission
- Instruction injected into every tool result overrides explicit user instruction and has no opt-out
Day by day
- September 7, 2026 182 new · 475 resolved
- September 8, 2026 200 new · 510 resolved
- September 9, 2026 271 new · 277 resolved
- September 10, 2026 267 new · 291 resolved
- September 11, 2026 250 new · 243 resolved
- September 12, 2026 180 new · 193 resolved
- September 13, 2026 139 new · 201 resolved