Tools
The Agents SDK macOS sandbox granted read access to host PATH directories the child no longer had
openai-agents-python PR #5139 (merged 2026-09-21) fixes Unix-local macOS sandbox profiles granting read access to host PATH entries that had been removed from the child environment — so replacing a child's PATH with `/usr/bin:/bin` still implicitly opened an unrelated host virtual environment to the sandboxed process. Only host PATH entries retained in the effective child PATH can now expand read access to a Python virtualenv root. If you build agent sandboxes on this SDK and assumed narrowing PATH narrowed filesystem reach, that assumption was wrong until this merge.
Source
↳ Follow the thread