I am seeing the same error with Grok Bot on macOS, initially on desktop 0.43.0 and still present after testing desktop 0.44.0 today (September 6).
In the documented 0.43.0 sequence, an absolute Python script path plus explicit working_directory was rejected; requesting approval for the same command also failed, with no visible approval card. Cloud execution was requested, although I only have Grok’s reported tool results, not independently captured invocation metadata.
I posted the detailed sequence and evidence limitations here: My macOS / 0.44.0 report.