[Bug] PreToolUse hook blockOnFailure bypassed by dangerouslyDisableSandbox parameter
Resolved 💬 3 comments Opened Jan 20, 2026 by cal88 Closed Jan 23, 2026
Bug Description
- Title: "dangerouslyDisableSandbox bypasses PreToolUse hook blockOnFailure"
- Description: Tool parameters override hook enforcement, creating security
bypass
Expected Fix: Claude Code should prevent execution if PreToolUse hook returns non-zero exit code, regardless of tool parameters
Environment Info
- Platform: linux
- Terminal: gnome-terminal
- Version: 2.1.12
- Feedback ID: 4a323e0a-3508-4e9d-9daf-2831a65d7a29
Errors
[{"error":"Error: EISDIR: illegal operation on a directory, read\n at Module.readFileSync (node:fs:449:20)\n at file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:9:464\n at xI (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:8:34380)\n at Object.readFileSync (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:9:433)\n at S62 (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:4626:27107)\n at Object.call (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:1561:942)\n at It5 (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:2700:19688)","timestamp":"2026-01-20T06:51:38.502Z"},{"error":"Error: EISDIR: illegal operation on a directory, read\n at Module.readFileSync (node:fs:449:20)\n at file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:9:464\n at xI (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:8:34380)\n at Object.readFileSync (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:9:433)\n at S62 (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:4626:27107)\n at Object.call (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:1561:942)\n at It5 (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:2700:19688)","timestamp":"2026-01-20T06:51:38.857Z"},{"error":"Error: Request was aborted.\n at EventTarget.Y (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:1083:26168)\n at [nodejs.internal.kHybridDispatch] (node:internal/event_target:831:20)\n at EventTarget.dispatchEvent (node:internal/event_target:766:26)\n at abortSignal (node:internal/abort_controller:370:10)\n at AbortController.abort (node:internal/abort_controller:392:5)\n at HP (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:5319:55645)\n at file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:5313:7383\n at Object.current (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:626:5060)\n at file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:626:2365\n at $l.J (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:626:3211)","timestamp":"2026-01-20T06:53:42.698Z"},{"error":"Error: Request was aborted.\n at EventTarget.Y (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:1083:26168)\n at [nodejs.internal.kHybridDispatch] (node:internal/event_target:831:20)\n at EventTarget.dispatchEvent (node:internal/event_target:766:26)\n at abortSignal (node:internal/abort_controller:370:10)\n at AbortController.abort (node:internal/abort_controller:392:5)\n at HP (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:5319:55645)\n at file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:5313:7383\n at Object.current (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:626:5060)\n at file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:626:2365\n at $l.J (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropic-ai/claude-code/cli.js:626:3211)","timestamp":"2026-01-20T06:53:42.699Z"},{"error":"Error: Request was aborted.\n at EventTarget.Y (file:///home/cal88/.nvm/versions/node/v20.19.6/lib/node_modules/@anthropi
Note: Error logs were truncated.
This issue has 3 comments on GitHub. Read the full discussion on GitHub ↗