Windows sandbox error when mode is "elevated"

What version of the Codex App are you using (From “About Codex” dialog)?

0.149.1

What subscription do you have?

Business

What platform is your computer?

Windows 11

What issue are you seeing?

timeout 180 codex exec --sandbox read-only --skip-git-repo-check "Run exactly one command: sed -n '198,201p' tests/test_lab_steps_registry.py — then print its raw output and nothing else. If the shell is rejected, print the exact rejection text." > "D:/<path>/49b75841-ba1f-4cbd-b163-b8b50eca85f8/scratchpad/codex_probe.out" 2>&1 < /dev/null; echo "exit=$?"; tail -25 "D:/<path>/49b75841-ba1f-4cbd-b163-b8b50eca85f8/scratchpad/codex_probe.out"

What steps can reproduce the bug?

exit=0
Reading additional input from stdin...
OpenAI Codex v0.149.1
--------
workdir: D:\<path>
model: gpt-5.6-sol
provider: openai
approval: never
sandbox: read-only
reasoning effort: high
reasoning summaries: none
session id: 01a03930-d33a-7f71-9a08-85a2ed8ef268
--------
user
Run exactly one command: sed -n '198,201p' tests/test_lab_steps_registry.py — then print its raw output and nothing else. If the shell is rejected, print the exact rejection text.
2026-08-25T13:51:46.677797Z ERROR codex_core::tools::router: error=exec_command failed for "D:\\Program Files\\PowerShell\\7\\pwsh.exe" -Command "sed -n '198,201p' tests/test_lab_steps_registry.py": CreateProcess { message: "Rejected(\"Failed to create unified exec process: helper_unknown_error: apply deny-read ACLs\")" }
codex
Rejected("Failed to create unified exec process: helper_unknown_error: apply deny-read ACLs")
tokens used
11,896
Rejected("Failed to create unified exec process: helper_unknown_error: apply deny-read ACLs")

What is the expected behavior?

output of grepped lines

Additional information

same call worked flawlessly on version 0.147.0