EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched ยท updates https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026 Forever Security published research on Oct 29 2026, which it calls EMBRACE, showing that the browsers built into five AI coding assistants let a web page or a local file reach the computer behind them. In Cursor a booby-trapped page got the agent to run a command on the host with a single Enter (fixed Oct 1). In GitHub Copilot a page could spoof the address bar to show github.com to both the user and the agent (fixed in Copilot 1.1.29). In Codex, VS Code and Claude Desktop a single local HTML file opened in the built-in browser could read and exfiltrate any file on the disk, such as SSH keys, .env files and npm tokens. Codex and VS Code had no fix at publication: Microsoft declined the report citing Workspace Trust, and OpenAI never replied. en Thu, 29 Oct 2026 00:00:00 GMT EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched: Forever Security publishes EMBRACE and a technical companion; the Codex and VS Code local-file-read issues are still unpatched at publication. https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026 https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026#2026-10-29-7f83b0a9 Thu, 29 Oct 2026 00:00:00 GMT high <p><a href="https://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers-technical">Source</a></p> EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched: Help Net Security covers the research and confirms Codex and VS Code had no fix as of Oct 29. https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026 https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026#2026-10-29-30166876 Thu, 29 Oct 2026 00:00:00 GMT high <p><a href="https://www.helpnetsecurity.com/2026/10/29/research-ai-assistant-browser-vulnerabilities/">Source</a></p> EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched: GitHub fixes the Copilot address bar spoofing (found on 1.1.27) in Copilot 1.1.29, before Forever had sent a report. https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026 https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026#2026-10-13-e436e124 Tue, 13 Oct 2026 00:00:00 GMT high <p><a href="https://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers">Source</a></p> EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched: Cursor patches its flaw without replying to the researchers. https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026 https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026#2026-10-01-af295e1c Thu, 01 Oct 2026 00:00:00 GMT high <p><a href="https://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers">Source</a></p> EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched: Forever Security discloses the Cursor code-execution issue to Cursor and the VS Code issue to Microsoft; Microsoft declines it as gated by Workspace Trust. https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026 https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026#2026-09-10-9e1cb95a Thu, 10 Sep 2026 00:00:00 GMT high <p><a href="https://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers">Source</a></p> EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched: Forever Security reports the Codex issue to OpenAI and never hears back. https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026 https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026#2026-07-27-b99d1df6 Mon, 27 Jul 2026 00:00:00 GMT high <p><a href="https://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers">Source</a></p> EMBRACE: built-in browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop broken, Codex and VS Code still unpatched: Forever Security reports the Claude Desktop local-file-read issue to Anthropic, which declines it as gated by Workspace Trust; a report from Noma Security filed on July 24 is accepted as valid. https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026 https://pwn.watch/i/embrace-ai-assistant-embedded-browsers-oct-2026#2026-07-23-2cbb720a Thu, 23 Jul 2026 00:00:00 GMT high <p><a href="https://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers">Source</a></p>