Forever Security

Embedded browsers in five AI coding assistants allow code execution, file theft and address spoofing

Forever Security◼ reported flaws in the embedded browsers of Cursor, GitHub Copilot◆, OpenAI Codex◆, VS Code and Claude Desktop, grouped under the name EMBRACE. Impacts include code execution in Cursor, address-bar spoofing in Copilot, and local file reads in Codex, VS Code and Claude Desktop, including SSH keys, .env files and npm tokens. Cursor and Copilot have been fixed, while Codex and VS Code were unpatched at publication.