[Bug] PreToolUse hook blockOnFailure bypassed by dangerouslyDisableSandbox parameter

Resolved 💬 3 comments Opened Jan 20, 2026 by cal88 Closed Jan 23, 2026

Bug Description

  • Title: "dangerouslyDisableSandbox bypasses PreToolUse hook blockOnFailure"
  • Description: Tool parameters override hook enforcement, creating security

bypass

Expected Fix: Claude Code should prevent execution if PreToolUse hook returns non-zero exit code, regardless of tool parameters

Environment Info

  • Platform: linux
  • Terminal: gnome-terminal
  • Version: 2.1.12
  • Feedback ID: 4a323e0a-3508-4e9d-9daf-2831a65d7a29

Errors

[{"error":"Error: EISDIR: illegal operation on a directory, read\n    at Module.readFileSync (node:fs:449:20)\n    at file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:9:464\n    at xI (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:8:34380)\n    at Object.readFileSync (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:9:433)\n    at S62 (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:4626:27107)\n    at Object.call (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:1561:942)\n    at It5 (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:2700:19688)","timestamp":"2026-01-20T06:51:38.502Z"},{"error":"Error: EISDIR: illegal operation on a directory, read\n    at Module.readFileSync (node:fs:449:20)\n    at file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:9:464\n    at xI (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:8:34380)\n    at Object.readFileSync (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:9:433)\n    at S62 (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:4626:27107)\n    at Object.call (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:1561:942)\n    at It5 (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:2700:19688)","timestamp":"2026-01-20T06:51:38.857Z"},{"error":"Error: Request was aborted.\n    at EventTarget.Y (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:1083:26168)\n    at [nodejs.internal.kHybridDispatch] (node:internal/event_target:831:20)\n    at EventTarget.dispatchEvent (node:internal/event_target:766:26)\n    at abortSignal (node:internal/abort_controller:370:10)\n    at AbortController.abort (node:internal/abort_controller:392:5)\n    at HP (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:5319:55645)\n    at file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:5313:7383\n    at Object.current (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:626:5060)\n    at file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:626:2365\n    at $l.J (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:626:3211)","timestamp":"2026-01-20T06:53:42.698Z"},{"error":"Error: Request was aborted.\n    at EventTarget.Y (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:1083:26168)\n    at [nodejs.internal.kHybridDispatch] (node:internal/event_target:831:20)\n    at EventTarget.dispatchEvent (node:internal/event_target:766:26)\n    at abortSignal (node:internal/abort_controller:370:10)\n    at AbortController.abort (node:internal/abort_controller:392:5)\n    at HP (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:5319:55645)\n    at file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:5313:7383\n    at Object.current (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:626:5060)\n    at file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:626:2365\n    at $l.J (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:626:3211)","timestamp":"2026-01-20T06:53:42.699Z"},{"error":"Error: Request was aborted.\n    at EventTarget.Y (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropi

Note: Error logs were truncated.

View original on GitHub ↗

This issue has 3 comments on GitHub. Read the full discussion on GitHub ↗