Reading in login.sql from the current directory is a security risk, so its been cleaned up in sqlcl and in sqlplus. But I think they havent catered for the fact that you might be *in* the sqlpath directory, eg
C:\oracle\sqlcl\bin>sql mcdonac/xxxxxxx
SQLcl: Release 4.2.0 Production on Wed Apr 19 17:14:56 2017
Copyright (c) 1982, 2017, Oracle. All rights reserved.
Last Successful login time: Wed Apr 19 2017 17:14:57 +08:00
Connected to:
Oracle Database 12c Enterprise Edition Release 12.2.0.1.0 - 64bit Production
mcdonac@db122 SQL> exit <---- login.sql has been run
Disconnected from Oracle Database 12c Enterprise Edition Release 12.2.0.1.0 - 64bit Production
C:\oracle\sqlcl\bin>cd \oracle\sql
C:\oracle\sql>C:\oracle\sqlcl\bin\sql mcdonac/xxxxxxxxxxx
SQLcl: Release 4.2.0 Production on Wed Apr 19 17:15:24 2017
Copyright (c) 1982, 2017, Oracle. All rights reserved.
Last Successful login time: Wed Apr 19 2017 17:15:25 +08:00
Connected to:
Oracle Database 12c Enterprise Edition Release 12.2.0.1.0 - 64bit Production
login.sql found in the CWD. DB access is restricted for login.sql.
Adjust the SQLPATH to include the path to enable full functionality.
SQL>
I'll let the sqlcl guys know.