Skip to content
Vulnerabilities Found in AI Assistants' Embedded Browsers

Vulnerabilities Found in AI Assistants' Embedded Browsers

First seen 29 Oct 2026, 14:42 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 29, 2026 at 16:15 UTC
  • •Five AI coding assistants have critical vulnerabilities in their embedded browsers.
  • •Two products, Codex and VS Code, remain unpatched as of October 29, 2026.
  • •The vulnerabilities allow for arbitrary code execution and sensitive data exfiltration.

Researchers from Forever Security identified vulnerabilities in the embedded browsers of five AI coding assistants: Cursor, GitHub Copilot, Codex, VS Code, and Claude Desktop. These vulnerabilities allow for various exploits, including executing arbitrary code, reading local files, and spoofing tab addresses. The attack method involves tricking users into clicking links that appear harmless, which can lead to the exfiltration of sensitive data such as SSH keys and cloud credentials. As of October 29, 2026, Codex and VS Code remain, posing an ongoing risk to developers using these tools. The vulnerabilities stem from the relaxation of standard browser security rules to enhance functionality, leading to the classification of these issues under the EMBRACE pattern. Cursor and Copilot have implemented fixes, but two vulnerabilities are still open and exploitable.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-29
Vulnerabilities disclosed
Forever Security reported vulnerabilities in Cursor, Copilot, Codex, VS Code, and Claude Desktop, allowing various exploits.
Helpnetsecurity
2026-10-29
Unpatched vulnerabilities confirmed
Codex and VS Code were confirmed to have unpatched vulnerabilities that could lead to data loss.
Helpnetsecurity

More articles in this cluster (2)

Extracted Entities (6)

1 / 4

Common questions

Which AI assistants are affected?
The affected AI assistants are Cursor, GitHub Copilot, Codex, VS Code, and Claude Desktop.
Are there patches available for all products?
No, as of October 29, 2026, Codex and VS Code have not released patches for their vulnerabilities.
What types of data could be exfiltrated?
Sensitive data such as SSH keys, cloud credentials, and developer tokens could be exfiltrated through the vulnerabilities.