Skip to content

Windows Codex App fails to start local shell commands with apply deny-read ACLs #30804

Description

@rexmanu

What version of the Codex App are you using (From “About Codex” dialog)?

26.630.12135

What subscription do you have?

ChatGPT PRO

What platform is your computer?

Microsoft Windows NT 10.0.26200.0 x64

What issue are you seeing?

Summary

Codex App on Windows cannot start local shell commands inside the current project. Even basic commands fail before execution with:

Rejected("Failed to create unified exec process: helper_unknown_error: apply deny-read ACLs")

This is not an Excel parsing issue. Python works from normal PowerShell, and I can manually read/convert the same .xlsx files outside Codex.

Environment

  • Product: Codex Windows App
  • Subscription: ChatGPT Plus
  • Codex App version: [fill in version from About Codex]
  • Platform: [paste PowerShell platform output here]
  • Project path:
D:\codex\04-商业核心
  • Python version from normal PowerShell:
py --version

Output:

Python 3.14.6
  • Python packages installed successfully from normal PowerShell:
py -m pip install pandas openpyxl

What I was trying to do

I wanted Codex to read two Excel files inside the project folder:

D:\codex\04-商业核心\input\利润率核算.xlsx
D:\codex\04-商业核心\input\投放复盘.xlsx

I asked Codex to use Python + pandas + openpyxl and not use Get-Content for .xlsx.

Steps to reproduce

  1. Open Codex Windows App.
  2. Open project folder:
D:\codex\04-商业核心
  1. Ask Codex to run a minimal local command, for example:
pwd

or:

python -c "import sys; print(sys.executable)"

or:

py -c "import pandas, openpyxl; print('ok')"
  1. Codex fails before executing the command.

Actual behavior

Codex reports:

Rejected("Failed to create unified exec process: helper_unknown_error: apply deny-read ACLs")

In one attempt, even pwd failed before execution.

Expected behavior

Codex should be able to run shell commands inside the selected project folder, or provide a clear sandbox setup error and recovery step.

What I already tried

I moved the Excel files into the project input folder:

D:\codex\04-商业核心\input

I granted read access with:

/sandbox-add-read-dir D:\codex\04-商业核心\input

After that, Codex could see that the .xlsx files existed, but it still could not start Python or other local execution commands.

From normal PowerShell, outside Codex, Python works correctly. I can manually convert the Excel files to CSV using pandas/openpyxl.

Workaround

I manually ran Python from normal PowerShell and converted the .xlsx files to CSV. Codex can continue with CSV, but it still cannot start local commands in that Codex thread.

Notes

I cannot attach the business Excel files because they contain internal company data.

What steps can reproduce the bug?

  1. Open Codex Windows App.

  2. Open a local project folder:

D:\codex\test-project
  1. Put two .xlsx files inside the project input folder:
D:\codex\test-project\input\workbook_a.xlsx
D:\codex\test-project\input\workbook_b.xlsx
  1. Ask Codex to run a minimal local command, for example:
pwd

or:

python -c "import sys; print(sys.executable)"

or:

py -c "import pandas, openpyxl; print('ok')"
  1. Codex fails before the command runs.

The error is:

Rejected("Failed to create unified exec process: helper_unknown_error: apply deny-read ACLs")

This also happened after I granted read access with:

/sandbox-add-read-dir D:\codex\test-project\input

After that, Codex could see that the .xlsx files existed, but it still could not start Python or other local execution commands.

What is the expected behavior?

Codex should be able to start basic local shell commands inside the selected project folder.

For example, these commands should run successfully:

pwd
python -c "import sys; print(sys.executable)"
py -c "import pandas, openpyxl; print('ok')"

If the sandbox cannot start local commands, Codex should provide a clear sandbox setup error and recovery steps.

In this case, normal PowerShell outside Codex can run Python successfully, so the issue appears specific to the Codex Windows App sandbox execution environment.

Additional information

可以,脱敏不会影响处理 bug。这个问题的核心不是你的业务文件名,而是:

Codex Windows App sandbox fails to start local commands with apply deny-read ACLs

把中文路径、业务文件名都换成通用名称即可。

Title

Windows Codex App fails to start local shell commands with apply deny-read ACLs

1. Steps to reproduce / What steps can reproduce the bug?

  1. Open Codex Windows App.

  2. Open a local project folder:

D:\codex\test-project
  1. Put two .xlsx files inside the project input folder:
D:\codex\test-project\input\workbook_a.xlsx
D:\codex\test-project\input\workbook_b.xlsx
  1. Ask Codex to run a minimal local command, for example:
pwd

or:

python -c "import sys; print(sys.executable)"

or:

py -c "import pandas, openpyxl; print('ok')"
  1. Codex fails before the command runs.

The error is:

Rejected("Failed to create unified exec process: helper_unknown_error: apply deny-read ACLs")

This also happened after I granted read access with:

/sandbox-add-read-dir D:\codex\test-project\input

After that, Codex could see that the .xlsx files existed, but it still could not start Python or other local execution commands.

2. What is the expected behavior?

Codex should be able to start basic local shell commands inside the selected project folder.

For example, these commands should run successfully:

pwd
python -c "import sys; print(sys.executable)"
py -c "import pandas, openpyxl; print('ok')"

If the sandbox cannot start local commands, Codex should provide a clear sandbox setup error and recovery steps.

In this case, normal PowerShell outside Codex can run Python successfully, so the issue appears specific to the Codex Windows App sandbox execution environment.

3. Additional information

This is not an Excel parsing issue.

From normal PowerShell outside Codex, Python works correctly:

py --version

Output:

Python 3.14.6

I installed the required packages successfully:

py -m pip install pandas openpyxl

I was also able to manually convert the same Excel files to CSV from normal PowerShell using pandas/openpyxl.

The problem is that Codex App cannot start local execution commands in the project thread. Even a minimal command such as pwd can fail before execution.

I cannot attach the original Excel files because they contain internal business data. The file names and project path above are anonymized, but the same failure occurs with the original local project.

Metadata

Metadata

Assignees

No one assigned

    Labels

    appIssues related to the Codex desktop appbugSomething isn't workingsandboxIssues related to permissions or sandboxingwindows-osIssues related to Codex on Windows systems

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions