Giving full access to all users for the host repo folder solved the issue. As this is a vulnerability, I shouldn't left it as 'chmod a+w'.

I have the same problem.

I agree providing solution on the software side rather than documentation is the best way to go. But since my request is for the client side, there is nothing to do for the Phabricator team except a minor improvement on the documentation.