cd /news/ai-tools/embrace-ai-coding-tools-leaking-ssh-… · home › topics › ai-tools › article
[ARTICLE · art-160673] src=byteiota.com ↗ pub= topic=ai-tools verified=true sentiment=↓ negative

EMBRACE: AI Coding Tools Leaking SSH Keys — Two Unpatched

Forever Security's EMBRACE research found that AI coding tools including VS Code and Codex can exfiltrate SSH keys and credentials via a single HTML file, with two tools still unpatched and 45 million users exposed. The findings name VS Code and Codex as affected tools and leave two of the tested tools without fixes at publication.

read1 min views3 publishedOct 30, 2026

Forever Security's EMBRACE research found VS Code and Codex can drain SSH keys and credentials with one HTML file. Two tools remain unpatched with 45 million users exposed.

The post EMBRACE: AI Coding Tools Leaking SSH Keys — Two Unpatched appeared first on byteiota .

source & further reading
byteiota.com — original article Visual Studio October 2026: Bulk Conflicts, Hot Exit Mistral Large 4: 1T Open Weights Drop — Free to Use tstack: 9 Agent Skills That Automate Your Entire PR Workflow
── more in #ai-tools 4 stories · sorted by recency
── more on @forever security 3 stories trending now
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
→ Live at https://your-agent.zahid.host ✓
Get free account → Pricing
from €0/mo · no card required
LIVE [news/embrace-ai-coding-to…] indexed:0 read:1min 2026-10-30 · —