diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index c12cce59d..82efd255c 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -49,7 +49,9 @@
         // Allow the container to access the host X11 display and EPICS CA
         "--net=host",
         // Make sure SELinux does not disable with access to host filesystems like tmp
-        "--security-opt=label=disable"
+        "--security-opt=label=disable",
+        // Allow the container to use the TUN device, required by claude-sandbox
+        "--device=/dev/net/tun"
     ],
     "mounts": [
         // Mount in the user terminal config folder so it can be edited