[wp-trac] [WordPress Trac] #63771: Access denied issue with wp-includes/css/dist folder in WordPress 6.8.1-6.8.3

WordPress Trac noreply at wordpress.org
Mon May 18 12:41:47 UTC 2026


#63771: Access denied issue with wp-includes/css/dist folder in WordPress
6.8.1-6.8.3
-------------------------------------------------+-------------------------
 Reporter:  369work                              |       Owner:  (none)
     Type:  defect (bug)                         |      Status:  new
 Priority:  normal                               |   Milestone:  Awaiting
                                                 |  Review
Component:  Administration                       |     Version:  6.8.3
 Severity:  normal                               |  Resolution:
 Keywords:  css dist file-permissions windows    |     Focuses:
  access-denied                                  |
-------------------------------------------------+-------------------------

Comment (by 369work):

 Hello, @jdeep15.

 Thank you for your comment.

 This problem has been ongoing.

 The same phenomenon is occurring even with WordPress 7.0RC3 installed.

 From my own investigation, I suspect Windows Defender is the culprit.

 I've narrowed it down to the combination of WordPress/Defender/Windows.

 Why the dist folder? Apparently, it's because it's an asset in the
 Gutengerg build.

 This behavior follows the same pattern as ransomware, which is why
 Defender reacts.

 The problem is that even administrators cannot modify or view the folder,
 it recurs even after disk formatting, and it only affects the dist folder.

 Today, I added the WordPress folder to Windows Defender's monitoring
 exclusion list.

 If nothing happens now, it will likely confirm that Defender is the cause.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/63771#comment:6>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list