# Codex Desktop (Windows/MSIX) HKG edge returns 403 — reqwest UA not overridden → empty plugins marketplace, slash commands gone, Fast Mode missing

**URL:** <https://community.openai.com/t/codex-desktop-windows-msix-hkg-edge-returns-403-reqwest-ua-not-overridden-empty-plugins-marketplace-slash-commands-gone-fast-mode-missing/1379677>\
**Category:** Codex CLI\
**Tags:** codex, bug, windows-app, codex-cli, cloudflare\
**Created:** [April 24, 2026, 9:45am UTC](https://community.openai.com/t/codex-desktop-windows-msix-hkg-edge-returns-403-reqwest-ua-not-overridden-empty-plugins-marketplace-slash-commands-gone-fast-mode-missing/1379677 "2026-04-24T09:45:45Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![hopezenith](https://avatars.discourse-cdn.com/v4/letter/h/9d8465/32.png) [@hopezenith](https://community.openai.com/u/hopezenith)\
**Post date:** [April 24, 2026, 9:45am UTC](https://community.openai.com/t/codex-desktop-windows-msix-hkg-edge-returns-403-reqwest-ua-not-overridden-empty-plugins-marketplace-slash-commands-gone-fast-mode-missing/1379677/1 "2026-04-24T09:45:45Z")

</div>

Cross-post of [[Bug] reqwest HTTP clients missing User-Agent override → Cloudflare 403 from HKG edge on Codex Desktop 26.422.x · Issue #18456 · openai/codex · GitHub](http://github.com/openai/codex/issues/18456) — posting here since Community is OpenAI-staff-monitored.

Version: Codex Desktop 26.422.2437.0 (MSIX, Microsoft Store, Windows 11)  
Location: Vietnam (tested on Viettel 5G + corporate ADSL, both route through Cloudflare HKG POP)  
Same account works fine on a different computer.

Root cause (confirmed via curl from the affected machine):

- `curl -A "reqwest/0.12.0" https://chatgpt.com/backend-api/plugins/featured` → 403 (Cloudflare)
- `curl -A "Codex-Desktop/26.422.2437.0" ...same URL...` → 401 (auth challenge — passes CF)
- `curl -A "Mozilla/5.0 Chrome/131" ...same URL...` → 200

-\> Cloudflare WAF at HKG is blocking the default `reqwest/*` User-Agent.  
 → Some Codex Rust HTTP clients are not overriding the UA (logs show codex\_analytics,  
codex\_core::plugins::manager, codex\_core::plugins::startup\_sync all hitting 403).

Impact: plugins marketplace empty, slash commands gone from UI, Fast Mode unavailable,  
settings menu broken. No local workaround — needs either (a) set UA on all reqwest  
clients in Codex, or (b) allowlist `reqwest/*` at CF edge.

Full reproduction + logs in GitHub issue #18456.

---

<div class="post-metadata">

**Author:** ![OpenAI\_Support](https://sea2.discourse-cdn.com/openai1/user_avatar/community.openai.com/openai_support/32/561845_2.png) [@OpenAI\_Support](https://community.openai.com/u/OpenAI_Support)\
**Post date:** [April 30, 2026, 9:07pm UTC](https://community.openai.com/t/codex-desktop-windows-msix-hkg-edge-returns-403-reqwest-ua-not-overridden-empty-plugins-marketplace-slash-commands-gone-fast-mode-missing/1379677/2 "2026-04-30T21:07:24Z")

</div>

Hey @hopezenith, thanks for flagging this and for taking the time to dig into it so thoroughly. This is really helpful context, and we’re taking a closer look on our side. We’ll share an update once we know more.

- Sunny