The sandbox issues on Windows — page 2
Issues the maintainers labelled both platform:windows and area:sandbox.
115 issues · 54 open · 61 resolved (53%) · first seen Feb 26, 2026
Is this getting better or worse?
This class of problem is still growing. 57 new reports in the last 90 days vs 45 in the 90 before — +27%. The open backlog peaked at 54 in 2026-10 and sits at 54 today.
Derived by counting each matching issue from its creation date until it closed. First-party
computation over the anthropics/claude-code tracker — the trend is not published
anywhere upstream.
Which builds report this
47 of these reports name the Claude Code build they were running, spanning 41 releases. Heaviest reporters:
- Claude Code v2.1.220
- Claude Code v2.1.267
- Claude Code v2.1.260
- Claude Code v2.1.197
- Claude Code v2.1.98
- Claude Code v2.1.92
- Claude Code v2.1.293
- Claude Code v2.1.286
Report volume, not a defect count: an issue can mention a build without that build having caused the failure. Versions come from the version string in the bug-report template, matched against real published tags.
Do these get fixed?
Median time to close is 39 days across 61 closures. Of the 61 closures with a recorded reason, 11% were closed as completed and 54 as not-planned or duplicate. The most recent completed fix landed in 2026-08.
Workarounds reported by the community
44 of these issues post a workaround someone says worked. The highest-engagement ones:
- [BUG] Cowork on Windows: bash sandbox can create files on mounted host folder but unlink is denied — breaks all git write operations
- …eyboards were destroyed in the repeated attempts to explore workarounds. When using Claude Code (Desktop and CLI) I did not hit this issue. Bummer, as I'm enjoying Cowork Desktop and am excited to see this resolved. I ha…
Found in the thread of #55206 · still open - [BUG] RPC error: useradd failed (exit status 12) — cannot start any new Cowork tasks
- FYI following the workaround: Workaround Fully quit Claude Desktop mv "~/Library/Application Support/Claude/vm bundles/claudevm.bundle/sessiondata.img" ~/Desktop/sessiondata.img.bak Restart Claude Desktop (recreates the…
Found in the thread of #36465 · resolved - Read tool PDF support broken on Windows — sandbox rejects pdftoppm from all locations
- …rShell within the same Claude Code session works perfectly: Workaround Two-step process via Bash: 1. Convert PDF to PNG: 2. Read the PNG with the Read tool This works reliably but requires extra Bash permission prompts a…
Found in the description of #65089 · resolved - [Bug] Claude Desktop VM workspace startup failure: path mismatch between AppData\Roaming and AppData\Local
- …ical - bash/workspace entirely unavailable Status Resolved (workaround applied) --- Summary After a Claude Desktop update, the Cowork bash/workspace sandbox failed to start on every session. The Linux VM could not be ini…
Found in the description of #56542 · resolved - [BUG] Claude-spawned child shells on Windows can't complete new outbound TLS handshakes to non-Anthropic endpoints (breaks Perforce)
- …another. Some state or configuration drives the enablement. Workaround Route p4 commands through WMI to spawn them outside Claude's process tree: $outFile = "C:\Users<USERNAME \AppData\Local\Temp\claude-p4-out.txt" if(Te…
Found in the description of #68219 · still open
Excerpts are quoted from the linked issue so you can judge relevance before opening it. Threads that only ask for a workaround, or report that there is none, are excluded. These are community suggestions, not official guidance from Anthropic — read the full thread before applying one.
Matching issues 101–115
Ranked by community engagement (reactions weighted over comments).
- [BUG]
- Worktree isolation denies `Edit` under the base repo's .claude/ — including a separate registered worktree — while `Bash` writes to the same directory are allowed
- [Bug] Cowork VM sandbox disk exhaustion: yes.exe output unbounded to VHDX without size limits
- [Bug] Unauthorized file system access beyond explicitly permitted directories
- [BUG]
- [BUG] Measured: `/sessions` refills to 88.6% disk in 16 days after a VM reset, and is never reclaimed — Windows data for #59856
- [BUG] Scheduled tasks — recurring sandbox provisioning failure
- [Cowork] Sandbox Linux (mcp__workspace__bash) no monta el disco compartido — Plan9 share "c" not mounted
- Cowork (Windows desktop): CoworkVMService never restarts and Plan9 drive shares fail to attach, surfaced as "You've been signed out"
- [BUG] Cowork on Windows: folders under Box Drive fail to mount into the sandbox — Box is exposed as a mounted volume, not a directory
- Runaway rm -rf: timeout auto-backgrounding kept a destructive command running, and TaskStop did not kill the child process (Windows)
- [Bug] Claude Code file access blocked for sensitive directories (passwords, SSH keys)
- PowerShell tool: pwsh.exe fails with "Permission denied" (exit 126) inside sandboxed session, while powershell.exe works fine
- please delete this issue. thank you
- Cowork session storage resolves through redirected AppData\Roaming (UNC path) even after reinstall, breaking sandbox operations entirely