[Windows] Codex App crashes in CrBrowserMain when Browser Use opens a page (0xC0000005 at chrome.dll+0x2e08f46)
What version of the Codex App are you using (From “About Codex” dialog)?
26.707.8168.0
What subscription do you have?
ChatGPT Pro (20x)
What platform is your computer?
Microsoft Windows NT 10.0.22631.0 x64
What issue are you seeing?
On Windows, asking Codex to use its in-app browser / Browser Use IAB backend reliably crashes the entire Codex App. There is no error dialog; the application simply disappears.
A neutral page is sufficient to reproduce it. The exact prompt used was:
请用内置浏览器打开 example.com
English translation: Please use the in-app browser to open example.com.
The page reaches DOM ready, then the browser process crashes about 1–5 seconds later.
I captured six Crashpad minidumps from independent reproductions. All six have the same native crash signature and the same Chrome stack prefix:
Process type: browser
Crashing thread: CrBrowserMain
Exception: 0xC0000005 (EXCEPTION_ACCESS_VIOLATION)
Operation: read
Invalid address: 0x558
Fault: chrome.dll+0x2e08f46
RCX: 0x0
Instruction: mov rax, qword ptr [rcx+0x558]
Chromium version: 150.0.7871.115
This is a null-object read in the Chromium browser main thread, not a renderer-only failure or a normal app exit.
The app log consistently reaches the Browser Use IAB WebView attach/navigation path immediately before the crash. A representative redacted sequence is:
IAB_LIFECYCLE renderer created browser sidebar webview ... initialUrl=about:blank
mcp_app_sandbox.attach_unmatched guestWebContentsId=3 url=undefined urlProtocol=invalid
IAB_LIFECYCLE runtime attached browser sidebar webview ...
IAB_LIFECYCLE registered debugger listener ...
browser sidebar dom-ready ... url=https://example.com/
Some reproductions also contain this immediately before the crash, although it is not present in every reproduction:
Received Browser Use PiP metadata ... tabID=1
Failed to upsert Browser Use PiP content ... tabID=1
What steps can reproduce the bug?
- Start Codex App on Windows.
- Open either a new conversation or an existing saved conversation.
- Send this prompt:
``text``
请用内置浏览器打开 example.com
- Wait for the in-app browser WebView to open and navigate to
https://example.com/. - Within approximately 1–5 seconds after DOM ready, the entire Codex App exits without an error dialog.
Observed reproduction rate during diagnosis: 6/6.
Affected Codex session/thread ID from the final reproduction:
[REDACTED — available privately to OpenAI maintainers upon request]
Token/context usage is not a factor: this also reproduces in a fresh, nearly empty conversation.
What is the expected behavior?
The in-app browser should open https://example.com/ and remain usable without terminating the Codex App.
If Browser Use or the WebView fails, Codex should report a recoverable error and keep the main application running instead of crashing the Chromium browser process.
Additional information
Controlled tests already performed
- Reproduces with both a new conversation and an existing saved conversation.
- Reproduces with both
https://example.com/and a Discord page, so it is not specific to one website. - Reproduces with both a visible right-panel WebView and a hidden Browser Use host.
- A targeted Chromium-partition reset was attempted, but later inspection showed that the active nested Chromium profile retained older files. Therefore, I am not claiming this as a verified clean-profile reproduction.
- Reproduces with Nahimic stopped. The resulting dump contained no Nahimic/A-Volute modules but had the identical crash address and Chrome stack.
- Reproduces with Windhawk stopped. The resulting dump contained no Windhawk modules/plugins but had the identical crash address and Chrome stack.
- Reproduced on app package
26.707.6957.0and again after updating to26.707.8168.0. Both packages used Chromium150.0.7871.115and produced the same native fault.
Excluded system-level causes
- No Windows Display,
nvlddmkm, WHEA, DxgKrnl, or GPU-reset events occurred around the crashes. - The GPU child process remained alive until the browser main process terminated.
- No out-of-memory or resource-exhaustion event was recorded. One representative incident had about 65% committed memory in use, about 3.2 GB available physical memory, and low page-file utilization.
- The main process was responsive immediately before the crash; this is not an AppHang.
Existing issue search
I searched the repository for Windows crashes involving Browser Use, chrome.dll, and CrBrowserMain.
- #24998 is broadly related because the Windows app closes unexpectedly, but it does not identify Browser Use/IAB as the trigger or report this fixed
CrBrowserMain/chrome.dll+0x2e08f46signature. - #21530 and #21912 concern Browser Use/IAB discovery or connection failures rather than a reproducible native browser-main crash.
This therefore appears to be a distinct, reliably reproducible Browser Use/IAB native crash.
Diagnostic artifacts
Crashpad minidumps and full desktop logs are available. I have not attached the raw dumps publicly because minidumps can contain process memory and session data, but I can provide them privately to OpenAI maintainers if requested.
25 Comments
Potential duplicates detected. Please review them and close your issue if it is a duplicate.
Powered by Codex Action
Independent reproduction with matching crash signature and additional route/PiP evidence
I can independently reproduce this issue on Windows with the same Codex App build and native crash signature.
Environment
26.707.8168.026.707.6957.0150.0.7871.115Observed behavior
The in-app Browser Use flow opens the target page, the page reaches DOM-ready, and the entire Codex App silently exits without an error dialog.
Windows records:
AppModel-Runtime Event ID 217
Destroyed Desktop AppX container for OpenAI.Codex
Native crash signature
The matching Crashpad dump shows:
Process: ChatGPT.exe / Codex App package
Process type: browser
Crashing thread: CrBrowserMain
Exception: 0xC0000005 (EXCEPTION_ACCESS_VIOLATION)
Operation: read
Invalid address: 0x558
Fault: chrome.dll+0x2e08f46
RCX: 0x0
Instruction: mov rax, qword ptr [rcx+0x558]
Chromium version: 150.0.7871.115
This matches the signature described in this issue.
Additional log sequence
My matching desktop logs also show a Browser Use conversation-route problem before the native crash:
client-new-threadidentifier.No ChatGPT browser route is available for browser session ...
http://localhost:3000/page reaches DOM-ready.Failed to upsert Browser Use PiP content
chrome.dllaccess violation.I am not claiming the route reassignment or PiP failure is the proven root cause, but they are repeatable precursors in my captured logs.
Troubleshooting already attempted
26.707.6957.0to26.707.8168.0The fault persisted across both app package versions, which used the same Chromium build.
Diagnostic artifacts
I have the matching:
t0,t1, andt4desktop logsI have not attached the raw dump or full logs publicly because they may contain local paths, session identifiers, project details, or process-memory fragments. I can provide them privately to OpenAI maintainers upon request.
Related detailed comment:
https://github.com/openai/codex/issues/30178#issuecomment-4955536444
Independent reproduction on Windows 10; full Chromium profile reset restored Browser Use
I independently reproduced this issue with the same Codex App version, but without a generated Crashpad minidump.
Environment
26.707.8168.0Microsoft Windows NT 10.0.19045.0 x64150.0.7871.115https://example.com/Observed behavior
Opening
https://example.com/through the Codex in-app Browser caused the entire Codex App to silently exit.The desktop log reached:
The log then ended abruptly. The main Codex process disappeared and Windows recorded:
There was no Windows
Application Errorevent and no.dmpfile. The Codex Crashpad directory contained onlysettings.dat.Earlier runs also contained:
The active Chromium profile reported:
Additional version-state observation
Before the crash, the bundled Browser client cache used version:
while the IAB backend reported:
After restarting Codex, the Browser plugin cache was automatically refreshed to
26.707.61608.I am not claiming this version difference as the proven root cause, but it may be relevant.
Workaround that restored Browser Use
With Codex completely closed, I renamed the full embedded Chromium profile:
to a timestamped backup directory, then restarted Codex so it generated a new profile.
Verification after the reset
Using the same Codex App version:
https://example.com/successfully.Example Domain.Therefore, a complete reset of
%APPDATA%\Codex\web\Codexis a confirmed workaround in this environment.Because both the Chromium profile and Browser plugin version changed before the successful retest, I cannot conclusively isolate which state caused the original crash.
Confirming the same failure on a newer Windows build.
Environment:
26.707.8479.0chrome.dll:150.0.7871.115019f58ac-a385-7fa0-ab68-6a91bb703830I observed four separate Codex process lifetimes ending abruptly immediately after Browser Use navigated an IAB webview to an ordinary HTTPS login page. Representative final sequence:
Other matching signals before some reproductions:
The affected process/log windows ended at approximately 13:20:21Z, 14:24:35Z, and 14:33:39Z on 2026-07-13; the latest reproduction occurred after updating from app
26.707.3748.0to26.707.8479.0. The newest build still carries Chromium150.0.7871.115.I found:
Avoiding the in-app Browser stops the process exits. This appears to match the native
CrBrowserMainfailure reported here, including the Chromium version and DOM-ready timing.Independent reproduction on 26.707.3748.0 with bundled-plugin reconciliation evidence
I independently reproduced this failure three consecutive times on Windows.
Environment
26.707.3748.0(Microsoft Store)26.707.31428Repeated failure signature
Each short-lived desktop instance exited immediately after the same in-app Browser (IAB) lifecycle:
This occurred for three separate process instances. Windows AppModel event 217 then recorded destruction of the application container. I found no matching Windows Error Reporting, Application Error, Application Hang, resource-exhaustion event, or Crashpad report.
As a control, after avoiding the in-app Browser, a fresh Codex instance remained stable for more than 31 minutes without an AppX destruction event or dump. Codex Doctor reported installation, configuration, authentication, network, WebSocket, and database checks as healthy; its only warning was
TERM=dumbfrom the non-interactive diagnostic shell.Additional bundled-plugin reconciliation evidence
I also attempted a controlled disabled-state test:
plugins."browser@openai-bundled".enabled=false.bundled_plugin_uninstall_requestedfor Browser and successful removal.bundled_plugin_install_requestedbecause Browser was missing/outdated, followed by successful installation.That repeatable reconciliation behaviour prevented a clean A/B test with the bundled Browser disabled.
This corroborates the Browser Use crash reported here and adds evidence that bundled-plugin reconciliation can automatically reinstall/re-enable Browser, defeating the normal disable workaround. I am not claiming that reconciliation is the native crash root cause; it is a separate repeatable behaviour relevant to isolating and mitigating the crash.
I have retained sanitised event timelines, Doctor output, and redacted log excerpts. Raw configuration, authentication data, tokens, usernames, local paths, and task/session identifiers are excluded.
Confirming on a newer Codex App build
This issue still reproduces on a newer package than those reported above.
Environment
26.707.9564.019045chrome.dll:150.0.7871.115Observed behavior
Opening the in-app Browser preview reliably causes the entire Codex App to exit silently. The embedded Chromium profile currently reports:
I found no fresh Windows Application Error/AppHang event and no new Crashpad dump for these exits. Avoiding the in-app Browser keeps the app usable.
This confirms that the failure remains present in app package
26.707.9564.0, which is newer than26.707.8479.0and26.707.8168.0reported earlier in this thread.No raw logs or profile files are attached because they contain private local paths and session metadata.
adding a similar crash report:
Title
Windows Codex Desktop 26.707.9981.0 crashes immediately when creating an in-app Browser tab
Codex version
OpenAI Codex Desktop (Microsoft Store/MSIX):
26.707.9981.0Platform
10.0.26200150.0.7871.115Problem
After the latest Codex Desktop update, starting an in-app Browser tab causes the entire Codex application to terminate and relaunch.
This is not caused by the local development server. The server was already running, remained healthy, and returned HTTP 200 throughout the incident.
The crash happens while creating an empty
about:blankBrowser tab, before Codex navigates to the localhost URL.Steps to reproduce
browser.tabs.new().about:blanktab.Reproduction rate in this task:
2/2.Expected result
Codex should create the Browser tab and remain running.
If Browser initialization fails, the failure should be recoverable and should not terminate the desktop application or interrupt the active tool call.
Actual result
The complete Codex AppX container is destroyed. After Codex relaunches, the interrupted task contains missing tool-call state.
Codex then repeatedly logs an error similar to:
Custom tool call output is missing for call idThat error appears to be a consequence of Codex terminating while the Browser tool call is still active.
Local diagnostic timeline
First controlled reproduction:
2026-07-14 23:31:39— Codex dispatchedbrowser.tabs.new().2026-07-14 23:31:42— Windows AppModel-Runtime Event ID 217 destroyed the Codex Desktop AppX container.2026-07-14 23:31:51–23:31:52— Windows created a new AppX container and relaunched Codex.Second reproduction:
2026-07-14 23:38:50— Windows AppModel-Runtime Event ID 217 destroyed the Codex AppX container again.2026-07-14 23:38:56— Windows relaunched Codex.Windows also recorded:
RADAR_PRE_LEAK_64ChatGPT.exe150.0.7871.115The installed Codex package was:
OpenAI.Codex_26.707.9981.0_x64__2p2nqsd0c76g0Development-server checks
The Vite development server was already listening at:
http://127.0.0.1:5173It continued returning:
200Codex crashed before navigating the Browser tab to this URL. Therefore, the Vite server and port were not the crash source.
Affected thread
Codex thread ID:
019f60cd-2a4a-7d40-aa98-917f8c5ae491Suspected cause
This appears to be the same Windows 26.707 embedded Chromium / in-app Browser regression reported here:
In this reproduction, even creating an empty
about:blanktab is sufficient to terminate the Codex AppX container. No website navigation, authentication, or application JavaScript is required.Workaround
Avoiding the Codex in-app Browser prevents this specific crash. Shell commands, TypeScript builds, Vite, Cargo, and the local development server continue working normally.
Raw Codex SQLite logs and session files are available privately if requested. I have not attached them publicly because they may contain prompts, local paths, command history, and tool output.
Independent reproduction on 26.707.9981.0: blank tab is sufficient
I independently reproduced the Windows in-app Browser crash on the current Microsoft Store/MSIX build.
Environment
OpenAI.Codex_26.707.9981.0Minimal reproduction
tabs.new().{ id: "1", url: "about:blank", title: "about:blank" }.No website navigation, page JavaScript, authentication, localhost server, or page DOM content is required.
Repeated evidence
Three app sessions ended at approximately
09:53:21,22:27:06, and22:45:29on 2026-07-14 immediately after opening an IAB tab.Every failing session contained:
No ChatGPT browser route is available for browser session ...warnings;mcp_app_sandbox.attach_unmatched ... url=undefined urlProtocol=invalidwarning;iab createTab mapped page to taband/orbrowser sidebar dom-ready;A separate clean session contained zero route failures and zero unmatched webview attachments, and ended normally with
stop_process/disconnected.The Browser Crashpad report database changed about two seconds after the controlled crash, but no retained
.dmpwas available. No matching Windows Application/WER crash event was found.This corroborates the existing 26.707.9981.0 report and narrows the trigger to IAB guest-webview creation/attachment itself. The route warnings are a repeatable precursor, but I am not claiming they are the proven native root cause. Full local logs and the affected Codex session ID can be provided privately if an OpenAI maintainer requests them.
Additional independent reproduction: cross-thread, localhost and
about:blankI independently reproduced the same Windows IAB crash across multiple Codex tasks on 2026-07-13 and 2026-07-14.
Environment
26.707.6957.026.707.51957150.0.7871.11526200Two distinct triggers with the same result
initialUrl=http://127.0.0.1:8765.initialUrl=about:blank.Both runs then recorded:
The desktop log ended immediately afterward and Windows destroyed/relaunched the Codex AppX container. The same
attach_unmatchedsequence occurred the previous day in another task, followed by debugger-listener registration and an abrupt log end.Earlier in the same sessions, the IAB client repeatedly reported:
This establishes that the failure is not specific to localhost, the development server, page JavaScript, or one conversation. An empty
about:blankhost is sufficient, and it reproduces across tasks.Crash artifacts
exit_type = Crashed.settings.datchanged.Update-state observation
Windows repeatedly staged
OpenAI.Codex_26.707.9981.0successfully, but after a full exit/relaunchGet-AppxPackage OpenAI.Codexstill reported26.707.6957.0. This may be unrelated to the native crash, but it complicated verifying the newer package locally. Other comments already confirm that26.707.9981.0remains affected.Additional controlled Windows reproduction.
Codex package:
OpenAI.Codex 26.707.9981.0
Feedback ID:
no-active-thread-019f61e2-8be2-78f1-b7d9-4cb56a99ae0f
Probe thread:
019f618e-aa2b-75d0-9107-b292f20cae88
Reproduction:
Process watcher:
18:04:33 local — process count increased from 8 to 9.
18:04:35 local — process count dropped to 0.
Probe transcript size:
0.55 MB
Relevant final desktop-log sequence:
The transcript, watcher CSV, package logs, Windows events, and SHA-256 manifest are preserved locally. I excluded current session logs and browser-tab data from the in-app feedback submission for privacy, but sanitized evidence can be provided privately to an OpenAI maintainer if requested.
Confirmed on a newer Windows build with the same signature.
Environment
OpenAI.Codex_26.707.9981.0_x64__2p2nqsd0c76g0https://www.amicidipassi.it/; the user did not manually open an in-app browser.Reproduction
Observed twice on 2026-07-14 (2/2):
The desktop log stops immediately after that final warning.
An independent process monitor sampled all ChatGPT/Codex processes as present at 21:19:34 and absent at 21:19:40. Free physical memory was approximately 1.4 GB immediately before termination and rose afterward, so this did not look like demonstrated system-wide memory exhaustion.
Crash artifacts checked
No matching artifact was found in:
%LOCALAPPDATA%\CrashDumpsThis closely matches the reported Browser Use / Chromium main-process termination behavior. The current workaround is to avoid the in-app Browser entirely and use an external/headless browser or command-line HTTP tooling. Sanitized log excerpts can be provided if useful.
Confirmed on a newer Codex Desktop build with a localhost page.
Environment
26.707.9981.026.707.7222110.0.26200https://localhost:7148/Reproduction
Reproduced 2/2 times:
First reproduction ended immediately after:
The restarted app reproduced it again:
The desktop log then stops abruptly at
20:25:18.160Z, with no graceful shutdown record.The same startup also reconciled the bundled Browser plugin, first requesting an uninstall with
reason=not_in_bundled_marketplace_plugin_names, then reinstalling it withreason=missing. This may be incidental, but it occurred in the same short window as the IAB attachment.Additional observations
chrome.dlladdress reported in this issue.Raw logs are not attached publicly because they include local paths and conversation metadata, but sanitized excerpts can be provided if useful.
Additional matching reproduction on Codex Desktop 26.707.9981.0
I encountered what appears to be the same failure on a newer Codex Desktop build.
Environment
26.707.9981.026200, x6432.0.15.7344Observed behavior
While Codex was using the in-app browser/browser sidebar to inspect a local HTML tutorial, the entire desktop application exited without an error dialog. A new Codex instance was started manually approximately 100 seconds later.
The local
file://navigation had already been blocked by policy before the page's JavaScript could execute, so the inspected page code did not run. The final desktop log sequence was in the IAB/WebView lifecycle:The log then ended abruptly. This closely matches the attach/navigation sequence reported here and in #30178.
Checks performed
render-process-gone, or fatal JavaScript stack was present in the available desktop logs.file://target was blocked before page execution, application JavaScript is unlikely to be the direct trigger.Expected behavior
A blocked or failed Browser Use/WebView navigation should return a recoverable error and leave the main Codex application running.
I have retained a sanitized incident report and can provide additional redacted log context if maintainers request it. Raw logs are not posted publicly because they may contain local workspace or session metadata.
Additional 8-crash sequence, current-build recurrence, and shipped-bundle findings
I have an independent Windows reproduction that matches this issue and adds a correlated eight-crash sequence plus two source-level findings that rule out misleading log signals.
Environment
10.0.26200OpenAI.Codex_26.707.9981.0_x64__2p2nqsd0c76g026.707.72221chrome.dll:150.0.7871.11542.1.00.144.2Eight confirmed access-violation exits on July 13
A passive
Process.Exitedtracer recorded eight Codex main-process exits with0xC0000005. It did not request termination. Every exit followed creation/attachment of an in-app Browser WebView. Seven of the eight logs reachedIAB_LIFECYCLE registered debugger listener1.66–4.02 seconds before the process exit.| Main PID | Exit time (UTC) | Last debugger-listener event (UTC) | Exit delay |
|---:|---|---|---:|
| 54412 | 12:22:32.885 | 12:22:29.862 | 3.023 s |
| 35488 | 14:07:26.552 | 14:07:23.423 | 3.129 s |
| 4944 | 14:29:35.810 | not logged; WebView attached at 14:29:33.133 | 2.677 s after attach |
| 57396 | 14:32:25.531 | 14:32:21.515 | 4.016 s |
| 62364 | 15:27:37.212 | 15:27:35.550 | 1.662 s |
| 66280 | 15:58:18.510 | 15:58:16.710 | 1.800 s |
| 67328 | 16:01:48.757 | 16:01:46.804 | 1.953 s |
| 12572 | 23:43:59.253 | 23:43:56.275 | 2.978 s |
The final confirmed incident followed this sequence:
The target was a healthy localhost page. Separate pages and tasks produced the same failure.
Current-build recurrence on July 14
After the Microsoft Store update to
26.707.9981.0, post-update inspection found the bundled IAB path enabled again with browser bundle26.707.72221andBROWSER_USE_AVAILABLE_BACKENDS="chrome,iab".The next IAB use produced:
There was no corresponding WER Application Error or Crashpad dump for this recurrence, so I am not claiming a native exception code for the
26.707.9981.0incident itself. Its lifecycle timing matches the earlier confirmed access-violation exits.Negative controls and mitigation evidence
0xC0000005processes had been launched with both--disable-gpuand--disable-gpu-compositing; GPU disablement did not prevent the failure.browser@openai-bundledand restricting Browser Use to the separate Chrome backend stopped the observed crash sequence while leaving Chrome automation available.Two shipped-bundle findings: PiP and truncated browser IDs are red herrings
I inspected the installed
app.asarand bundled Browser client read-only.falseon every non-macOS platform. Its caller then logsFailed to upsert Browser Use PiP content. Therefore, that warning is expected on Windows and does not establish PiP as the crash source.-735d-...are therefore expected by the shipped client, not evidence of UUID corruption.Those findings move the strongest boundary earlier: guest
WebContentsattachment plus the Electron CDP debugger path. The shipped flow attacheswebContents.debuggerwith protocol1.3, registers message/destruction/render-process listeners, and then performs browser commands. Seven of eight native exits occurred within four seconds of that boundary, with norender-process-gonerecovery log before the browser main process disappeared.Requested investigation / immediate containment
Please investigate the private Codex/Owl Electron WebView +
webContents.debuggerlifecycle with symbols for Chromium150.0.7871.115, especially ownership/finalization during guest attachment, route rebinding, and teardown.Until the native fault is fixed, please consider remotely disabling IAB on affected Windows builds and falling back to the separate Chrome backend. Also preserve an explicit user IAB disable across bundled-plugin reconciliation or app updates so an update cannot silently restore the crashing path.
Sanitized logs and the correlation table are available. Raw logs are not posted because they contain local paths, thread IDs, task metadata, and conversation content.
Update: clean reinstall on the same build restored Browser Use
This is now resolved for me after a clean reinstall of Codex Desktop.
Important detail: Microsoft Store reinstalled the same app build,
26.707.9981.0; this was not fixed by upgrading to a newer version.Before uninstalling, I backed up
%USERPROFILE%\.codex. After uninstalling, I did not restore the old package-local Codex/Browser profile under%LOCALAPPDATA%\Packages\OpenAI.Codex_2p2nqsd0c76g0.Controlled retest after reinstall:
tabs.new()created anabout:blanktab and it remained open for more than 5 seconds;https://example.com/successfully;This suggests stale or corrupted package-local Browser/app state may be involved. A clean reinstall that resets the package-local profile is a working workaround in my case.
Recommendation for anyone trying this workaround: back up
.codexfirst because it contains sessions/config/auth, and test Browser Use before restoring any old package-local Browser profile. This is one successful clean-profile retest, so I cannot yet rule out recurrence.Additional independent reproduction on Windows 10 with Codex App 26.707.9564.0
I can independently reproduce the same DOM-ready → silent full-app exit pattern on a newer Codex App package.
Environment
10.0.1904526.707.9564.026.707.71524150.0.7871.115Sanitized local timeline (KST, UTC+09:00)
The same page returns HTTP 200 through a non-IAB check and opens normally in external Microsoft Edge. Codex remains alive when the external browser path is used.
There is no local WER Application Error record or Crashpad minidump for this incident, so I am not claiming that this particular reproduction directly proves the
CrBrowserMain / 0xC0000005 / chrome.dll+0x2e08f46signature. The lifecycle timing and unchanged Chromium build strongly match the regression documented in this issue.Requested fix / containment
Please:
in_app_browser=false(or equivalent external-browser fallback) effective across app/plugin updates;No raw logs, local paths, thread identifiers, configuration files, or private data are attached.
Additional controlled reproduction on Windows 10 build 19045, Codex App
26.707.9981.0, Chromium150.0.7871.115: Browser Usetabs.new()alonecreated an
about:blankIAB tab and the app crashed about two seconds later,before navigation, page content, DOM inspection, a debugger listener, or
finalization.
The crash signature matches exactly:
CrBrowserMain,0xC0000005read atchrome.dll+0x2E08F46,RCX=0, attempted address0x558.No raw dump, full logs, local paths, task/session identifiers, project details,
or user data are attached for privacy.
I can confirm the same Browser Use / IAB crash still reproduces on a newer Windows Store build.
Environment
OpenAI.Codex_26.707.9981.0_x64__2p2nqsd0c76g010.0.26200Reproduction
This reproduced four times in one session. The latest incident occurred on 2026-07-15 around 17:09:53 local time (Asia/Shanghai).
Consistent sanitized log tail
The desktop log then stops abruptly without a normal shutdown sequence. Windows AppModel-Runtime records Event ID 217 destroying the complete
OpenAI.Codex_26.707.9981.0AppX container a few seconds later. There is no matching Application Error / APPCRASH event or user-visible crash dialog.This is highly consistent with the crash described here and confirms it persists beyond builds
26.707.6957.0and26.707.8168.0. The current workaround is to disablebrowser@openai-bundledand avoid the in-app Browser. Full local logs contain conversation metadata, so only the sanitized sequence is included.Independent same-machine A/B: stable 26.707.9981.0 vs installed Beta
I can independently reproduce this on the current Microsoft Store stable package. This report is intentionally sanitized: local usernames, paths, repository names, URLs, thread/request IDs, and raw logs are omitted.
Environment
OpenAI.Codex_26.707.9981.026.707.72221150.0.7871.115OpenAI.CodexBeta_26.707.3351.026.707.30751Trigger
The failure occurs not only when creating a new Browser tab, but also when opening/resuming a saved coding chat that restores an active Browser Use sidebar tab.
I observed four consecutive stable-app process lifetimes end immediately after Browser Use restored a page. The targets included both a localhost development page and an ordinary HTTPS page, so the target application/site is not required.
Representative sanitized final sequence:
Windows then recorded:
There was no normal app-server shutdown, Windows Application Error/AppHang event, WER crash report, or retained Crashpad dump for these exits.
Same-machine working comparison
The separately installed Beta build on the same machine opened and navigated an IAB webview to a localhost application successfully. After the final DOM-ready event, that app instance continued logging normally for more than 14 minutes.
This does not establish that every Beta environment is unaffected. It is a useful same-machine discriminator between:
26.707.9981.0/ IAB26.707.72221: repeated abrupt AppX termination;26.707.3351.0/ IAB26.707.30751: successful sustained Browser Use in the captured run.The PiP upsert failure is a repeatable immediate precursor in this environment, but without a dump I am not claiming it is the proven native fault.
Workaround
Avoid restoring or creating in-app Browser tabs in the stable Windows app. The installed Beta build remained usable in the controlled comparison, though external Chrome/Edge is the lower-risk workaround.
Sanitized excerpts and exact UTC timelines can be provided if maintainers need them. Raw logs are not attached because they contain local paths, task metadata, and conversation content.
Independent Windows reproduction on Intel Arc; exact DOM-ready to silent-exit timeline
I can confirm the same in-app Browser failure on a different GPU configuration.
Environment
26.707.8479.026.707.9981.0(not deliberately retested because each reproduction terminates the active desktop session)10.0.2620032.0.101.86263.47.17.59Sanitized timeline (UTC, 2026-07-13)
The whole Codex window disappeared without an error dialog. The destination worked normally outside the Codex in-app Browser.
Negative evidence
settings.datThis closely matches the reported IAB/WebView lifecycle and silent full-process termination. It also extends the affected hardware set beyond the NVIDIA configurations already reported here.
I have retained the original logs locally. Raw logs are not posted because they contain local paths, task identifiers, and conversation metadata, but I can provide narrowly sanitized excerpts if an OpenAI maintainer requests them.
Independent reproduction on Windows 10 build 19043 / Codex 26.707.9981.0
I can independently reproduce the same silent full-app exit on the current Microsoft Store build.
Environment
OpenAI.Codex_26.707.9981.0_x64__2p2nqsd0c76g026.707.72221150.0.7871.11510.0.1904330.0.14.7111(471.11, 2021-06-21)Reproduction
The entire Codex process exits shortly after the sidebar WebView attaches and reaches DOM-ready. I reproduced this repeatedly with:
https://example.com/in the visible IAB panel;Representative lifecycle:
The failure is not specific to Browser Use automation: manually opened sidebar pages also trigger it. Removing
browser@openai-bundled-betaand leaving only the stable bundled Browser did not change the behavior.Negative evidence / state
profile.exit_type = "Crashed".This matches the reported native IAB/Chromium failure boundary. Raw logs are not attached because they contain local paths, task metadata, and conversation identifiers; sanitized excerpts can be provided if maintainers request them.
Still reproducible on Windows 10 with Codex Desktop version 26.707.91948.
The in-app browser itself opens normally and remains stable on about:blank. The crash only occurs after navigating to a website: once the page has finished loading / reaches DOM ready, the entire Codex app silently exits without an error message.
Independent reproduction on newer AppX 26.707.12708.0 with full-dump confirmation
I can independently reproduce the identical crash signature on a newer Windows package.
Environment
OpenAI.Codex_26.707.12708.0_x64__2p2nqsd0c76g0chrome.dll:150.0.7871.11526100Reproduction
Representative sanitized lifecycle:
The ResizeObserver warnings are correlated precursors in this capture; I am not claiming they are the proven root cause.
Full-dump result
WinDbg analysis of a full process dump shows:
This exactly matches the native signature reported in this issue and confirms that the bug persists in AppX
26.707.12708.0. It also reproduces through a file-backed local preview in the visible right-panel WebView.The captured module list for the faulting process contained Codex and Windows modules only; no third-party injected modules were observed. Raw dumps and full logs are withheld because they may contain session data, local paths, and process-memory fragments. They can be provided privately to OpenAI maintainers if requested.
Additional independent reproduction: AppX 26.707.12708.0 crashes on
about:blankaloneI independently reproduced the same native crash on 2026-07-16. This reproduction is narrower than page-navigation reports: creating the first controlled IAB tab is sufficient; no real URL is ever loaded.
Environment
OpenAI.Codex_26.707.12708.0_x64__2p2nqsd0c76g026.707.91948chrome.dll:150.0.7871.11510.0.26200Minimal reproduction
iabbackend.``
js
``const tab = await iab.tabs.new();
{ id: "1", url: "about:blank" }.No
goto(), website, localhost server, file URL, interaction, subagent, or parallel Browser task is involved. Reproduction rate in this controlled session: 3/3.Sanitized lifecycle timeline (UTC):
ProcDump-confirmed crash
A Microsoft ProcDump 12.01 unhandled-exception monitor was attached to the main
ChatGPT.exeprocess and produced a 12 MB minidump:The immediate native return sites recovered from the stack/disassembly are:
Symbol identity for maintainer-side symbolization:
Dump SHA-256:
The captured module list did not contain
serialport.node,node-hid, or the Work Louder device-kit modules, so this controlled Browser/IAB crash is distinct from the separate0xC06D007Fserialport/device-kit crash reports.The raw minidump and full desktop log are retained locally and can be provided privately to OpenAI maintainers if requested; they are not attached publicly because they can contain process-memory and session data.
Does this mean the Codex in-app browser isn't supported on Windows 10?