External directory permission does not work on Windows #7875

Open
opened 2026-02-16 18:08:33 -05:00 by yindo · 2 comments
Owner

Originally created by @pschiel on GitHub (Jan 28, 2026).

Originally assigned to: @rekram1-node on GitHub.

Steps to reproduce

  • setup external_directory permission
  • ask agent to write a file to a different drive
  • agent writes files without asking

Root Cause

In a Windows environment with mixed paths (Windows, MSYS/GitBash) the Wildcard/Permission system breaks in several cases (relative paths, absolute paths / cross-drive) due to path mismatching.

#6763 fixes this via path normalization

Originally created by @pschiel on GitHub (Jan 28, 2026). Originally assigned to: @rekram1-node on GitHub. ## Steps to reproduce - setup `external_directory` permission - ask agent to write a file to a different drive - agent writes files without asking ## Root Cause In a Windows environment with mixed paths (Windows, MSYS/GitBash) the Wildcard/Permission system breaks in several cases (relative paths, absolute paths / cross-drive) due to path mismatching. #6763 fixes this via path normalization
yindo added the windowsbug labels 2026-02-16 18:08:33 -05:00
Author
Owner

@github-actions[bot] commented on GitHub (Jan 28, 2026):

This issue might be a duplicate of existing issues. Please check:

  • #8313: Path traversal vulnerability via symlinks and cross-drive paths

Feel free to ignore if none of these address your specific case.

@github-actions[bot] commented on GitHub (Jan 28, 2026): This issue might be a duplicate of existing issues. Please check: - #8313: Path traversal vulnerability via symlinks and cross-drive paths Feel free to ignore if none of these address your specific case.
Author
Owner

@OpeOginni commented on GitHub (Jan 28, 2026):

Do you mean the agent writes file to that external_directory you just set?

@OpeOginni commented on GitHub (Jan 28, 2026): Do you mean the agent writes file to that `external_directory` you just set?
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#7875