Repository navigation
External directory permission does not work on Windows #11042
Description
Steps to reproduce
- setup
external_directorypermission - ask agent to write a file to a different drive
- agent writes files without asking
Root Cause
In a Windows environment with mixed paths (Windows, MSYS/GitBash) the Wildcard/Permission system breaks in several cases (relative paths, absolute paths / cross-drive) due to path mismatching.
#6763 fixes this via path normalization
Activity
github-actions commentedon Jan 28, 2026
This issue might be a duplicate of existing issues. Please check:
Feel free to ignore if none of these address your specific case.
OpeOginni commentedon Jan 28, 2026
Do you mean the agent writes file to that
external_directoryyou just set?fantomc0der commentedon Feb 22, 2026
Even when I don't declare an explicit permission for "external_directory" and let it fall back to:
OpenCode is more than happy to reach outside the current working directory to read any part of my file system, including files with secrets from my home directory. I haven't been able to prevent it from doing that yet, regardless of how I configure the permission for "external_directory".
kennethac commentedon Mar 27, 2026
Why did this get closed? This is definitely still happening and is a critical security problem!