Sign inGet the app

Vulnerability · 2 sources · latest 11h

Embedded browsers in five AI coding assistants allow code execution, file theft and address spoofing

Severity
High
Sources
2

What happened

Researchers found that the small web browsers built into five popular AI coding tools could be tricked into running attacker code, showing a fake web address, or reading private files on a developer's computer. Some of the problems have been fixed, but others were still unpatched when the research was published.

Like I’m new · Written by AI from 2 sources · Wrong?

Read the full story at the sourceAsk about this story

Full story timeline · 2 updates

  1. Thu 29 OctoberResearchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude DesktopHelp Net Security
  2. Fri 30 OctoberResearchers Hacked Cursor, GitHub Copilot, Codex, VS Code, and Claude Desktop Embedded BrowsersCyber Security News

Who reported · 2 outlets

Help Net SecurityCyber Security News

Report a problem

Embedded browsers in five AI coding assistants allow code execution, file theft and address spoofing · RedTeamDaily