{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched · updates",
  "home_page_url": "https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026",
  "feed_url": "https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026/feed.json",
  "description": "Forever Security published research on Oct 29 2026, which it calls EMBRACE, showing that the browsers built into five AI coding assistants let a web page or a local file reach the computer behind them. In Cursor a booby-trapped page got the agent to run a command on the host with a single Enter (fixed Oct 1). In GitHub Copilot a page could spoof the address bar to show github.com to both the user and the agent (fixed in Copilot 1.1.29). In Codex, VS Code and Claude Desktop a single local HTML file opened in the built-in browser could read and exfiltrate any file on the disk, such as SSH keys, .env files and npm tokens. Codex and VS Code had no fix at publication: Microsoft declined the report citing Workspace Trust, and OpenAI never replied.",
  "language": "en",
  "_pwn": {
    "slug": "embrace-ai-assistant-embedded-browsers-oct-2026",
    "severity": "high",
    "status": "live",
    "patchStatus": "partial",
    "rss": "https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026/feed.xml",
    "llms": "https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026/llms.txt",
    "json": "https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026#2026-10-29-7f83b0a9",
      "url": "https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026#2026-10-29-7f83b0a9",
      "title": "EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched: Forever Security publishes EMBRACE and a technical companion; the Codex and VS Code local-file-read issues are still unpatched at publication.",
      "content_text": "EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched: Forever Security publishes EMBRACE and a technical companion; the Codex and VS Code local-file-read issues are still unpatched at publication.\n\nSource: https://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers-technical",
      "date_published": "2026-10-29T00:00:00.000Z",
      "external_url": "https://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers-technical",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026#2026-10-29-30166876",
      "url": "https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026#2026-10-29-30166876",
      "title": "EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched: Help Net Security covers the research and confirms Codex and VS Code had no fix as of Oct 29.",
      "content_text": "EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched: Help Net Security covers the research and confirms Codex and VS Code had no fix as of Oct 29.\n\nSource: https://www.helpnetsecurity.com/2026/10/29/research-ai-assistant-browser-vulnerabilities/",
      "date_published": "2026-10-29T00:00:00.000Z",
      "external_url": "https://www.helpnetsecurity.com/2026/10/29/research-ai-assistant-browser-vulnerabilities/",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026#2026-10-13-e436e124",
      "url": "https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026#2026-10-13-e436e124",
      "title": "EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched: GitHub fixes the Copilot address bar spoofing (found on 1.1.27) in Copilot 1.1.29, before Forever had sent a report.",
      "content_text": "EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched: GitHub fixes the Copilot address bar spoofing (found on 1.1.27) in Copilot 1.1.29, before Forever had sent a report.\n\nSource: https://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers",
      "date_published": "2026-10-13T00:00:00.000Z",
      "external_url": "https://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026#2026-10-01-af295e1c",
      "url": "https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026#2026-10-01-af295e1c",
      "title": "EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched: Cursor patches its flaw without replying to the researchers.",
      "content_text": "EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched: Cursor patches its flaw without replying to the researchers.\n\nSource: https://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers",
      "date_published": "2026-10-01T00:00:00.000Z",
      "external_url": "https://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026#2026-09-10-9e1cb95a",
      "url": "https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026#2026-09-10-9e1cb95a",
      "title": "EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched: Forever Security discloses the Cursor code-execution issue to Cursor and the VS Code issue to Microsoft; Microsoft declines it as gated by Workspace Trust.",
      "content_text": "EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched: Forever Security discloses the Cursor code-execution issue to Cursor and the VS Code issue to Microsoft; Microsoft declines it as gated by Workspace Trust.\n\nSource: https://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers",
      "date_published": "2026-09-10T00:00:00.000Z",
      "external_url": "https://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026#2026-07-27-b99d1df6",
      "url": "https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026#2026-07-27-b99d1df6",
      "title": "EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched: Forever Security reports the Codex issue to OpenAI and never hears back.",
      "content_text": "EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched: Forever Security reports the Codex issue to OpenAI and never hears back.\n\nSource: https://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers",
      "date_published": "2026-07-27T00:00:00.000Z",
      "external_url": "https://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026#2026-07-23-2cbb720a",
      "url": "https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026#2026-07-23-2cbb720a",
      "title": "EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched: Forever Security reports the Claude Desktop local-file-read issue to Anthropic, which declines it as gated by Workspace Trust; a report from Noma Security filed on July 24 is accepted as valid.",
      "content_text": "EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched: Forever Security reports the Claude Desktop local-file-read issue to Anthropic, which declines it as gated by Workspace Trust; a report from Noma Security filed on July 24 is accepted as valid.\n\nSource: https://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers",
      "date_published": "2026-07-23T00:00:00.000Z",
      "external_url": "https://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers",
      "tags": [
        "high"
      ]
    }
  ]
}