diff --git a/codex-rs/core/src/tools/network_approval.rs b/codex-rs/core/src/tools/network_approval.rs
index b198cd16c5..ccbde8c207 100644
--- a/codex-rs/core/src/tools/network_approval.rs
+++ b/codex-rs/core/src/tools/network_approval.rs
@@ -417,7 +417,7 @@ impl NetworkApprovalService {
 
         {
             let denied_hosts = self.session_denied_hosts.lock().await;
-            if denied_hosts.contains(&key) {
+            if denied_hosts.contains(&key) && !pre_tool_use_asks_user {
                 return NetworkDecision::deny(REASON_NOT_ALLOWED);
             }
         }