Copilot's enabled sandbox now permits local-network access by default
Copilot CLI 1.0.100 defaults local/private-network access on inside an enabled sandbox. Version 1.0.101 permits direct macOS localhost TCP when local access is enabled and no host filters apply. Stable 1.0.103 also repairs saved sandbox settings and launch flags in new and resumed ACP sessions. Sandboxing itself remains default-off. Pinned docs still show the older network default, so omission is an unsafe policy choice.
What this changes for operators
- Terminal and ACP fleet owners: install stable 1.0.103 and set sandbox.allowLocalNetwork deliberately. Test a needed development listener and an unintended private service on each host; a functioning local development loop can now replace a workaround while exposing services an operator previously assumed were unreachable.
- Compare new and resumed ACP sessions with saved settings and launch flags, recording the actual server binary. For required containment, verify enabled=true, failIfUnavailable=true and allowBypass=false in managed policy. The 1.0.103 release and package establish delivery even though its final public notes commit is ahead of the source tag.
- Keep host-filter and Windows cases in the test matrix. Platform-specific connection and refusal traces would settle the deployed boundary; the narrow macOS exception does not prove every localhost path works. Use those results to decide whether saved configuration removes per-session repair work.
Primary sources
- github_release 2026-10-24-github-copilot-cli-local-network-access-defaults-on-and-macos-gains-a-narrower-localhost-exception github/copilot-cli / v1.0.100
- github_release 2026-10-24-github-copilot-cli-local-network-access-defaults-on-and-macos-gains-a-narrower-localhost-exception github/copilot-cli / v1.0.101
- tagged_commit_file 2026-10-24-github-copilot-cli-local-network-access-defaults-on-and-macos-gains-a-narrower-localhost-exception github/copilot-cli / changelog.md#L18-L95
- tagged_commit_file 2026-10-24-github-copilot-cli-local-network-access-defaults-on-and-macos-gains-a-narrower-localhost-exception github/docs / content/copilot/reference/copilot-cli-reference/cli-config-dir-reference.md#L504
- tagged_commit_file 2026-10-24-github-copilot-cli-local-network-access-defaults-on-and-macos-gains-a-narrower-localhost-exception github/docs / content/copilot/how-tos/cloud-and-local-sandboxes/configuring-local-sandbox-settings.md#L256-L272
- github_release 2026-10-24-github-copilot-cli-acp-honors-saved-sandbox-settings-and-launch-flags-on-new-and-resumed-sessions github/copilot-cli / v1.0.103
- tagged_commit_file 2026-10-24-github-copilot-cli-acp-honors-saved-sandbox-settings-and-launch-flags-on-new-and-resumed-sessions github/copilot-cli / changelog.md#L4
- tagged_commit_file 2026-10-24-github-copilot-cli-acp-honors-saved-sandbox-settings-and-launch-flags-on-new-and-resumed-sessions github/docs / content/copilot/reference/copilot-cli-reference/acp-server.md#L37-L55
- official_docs 2026-10-24-github-copilot-cli-acp-honors-saved-sandbox-settings-and-launch-flags-on-new-and-resumed-sessions registry.npmjs.org/@github/copilot/1.0.103
Signal metadata
Source findings
- 2026-10-24-github-copilot-cli-local-network-access-defaults-on-and-macos-gains-a-narrower-localhost-exception 2026-10-24-github-copilot-cli-local-network-access-defaults-on-and-macos-gains-a-narrower-localhost-exception
- 2026-10-24-github-copilot-cli-acp-honors-saved-sandbox-settings-and-launch-flags-on-new-and-resumed-sessions 2026-10-24-github-copilot-cli-acp-honors-saved-sandbox-settings-and-launch-flags-on-new-and-resumed-sessions
Featured in
- The Owner Can Be an Agent / 2026-10-24
Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0
Schema: bitter.frontier_signals.v0 / ID: 2026-10-24-github-copilot-cli-sandbox-local-network-default
Research evidence and publication history are open in the repository.