{"slug": "researchers-broke-the-browsers-built-into-vs-code-cursor-copilot-codex-and", "title": "Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop", "summary": "Forever Security found ways to escape the built-in browsers in five AI coding assistants — Cursor, GitHub Copilot, OpenAI's Codex, Microsoft's VS Code and Anthropic's Claude Desktop — letting a web page or local file reach the computer behind the browser. Cursor ran attacker code, Copilot displayed a fake address, and Codex, VS Code and Claude Desktop allowed a single local file to read the rest of the disk. Two of the vulnerabilities remain unpatched.", "body_md": "Forever Security found ways out of the built-in browsers in five AI coding assistants: Cursor, GitHub Copilot, OpenAI’s Codex, Microsoft’s VS Code and Anthropic’s Claude Desktop. In all five, a web page or a local file reached the computer behind the browser. Cursor ran attacker code, Copilot showed a fake address, and Codex, VS Code and Claude Desktop let a single local file read the rest of the disk. Two of those holes are still … [More](https://www.helpnetsecurity.com/2026/10/29/research-ai-assistant-browser-vulnerabilities/) \n\nThe post [Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop](https://www.helpnetsecurity.com/2026/10/29/research-ai-assistant-browser-vulnerabilities/) appeared first on [Help Net Security](https://www.helpnetsecurity.com).", "url": "https://wpnews.pro/news/researchers-broke-the-browsers-built-into-vs-code-cursor-copilot-codex-and", "canonical_source": "https://www.helpnetsecurity.com/2026/10/29/research-ai-assistant-browser-vulnerabilities/", "published_at": "2026-10-29 14:10:49+00:00", "updated_at": "2026-10-29 14:20:48.634842+00:00", "lang": "en", "topics": ["ai-safety", "ai-tools", "developer-tools", "artificial-intelligence"], "entities": ["Forever Security", "Cursor", "GitHub Copilot", "OpenAI", "Codex", "Microsoft", "VS Code", "Anthropic"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/researchers-broke-the-browsers-built-into-vs-code-cursor-copilot-codex-and", "markdown": "https://wpnews.pro/news/researchers-broke-the-browsers-built-into-vs-code-cursor-copilot-codex-and.md", "text": "https://wpnews.pro/news/researchers-broke-the-browsers-built-into-vs-code-cursor-copilot-codex-and.txt", "jsonld": "https://wpnews.pro/news/researchers-broke-the-browsers-built-into-vs-code-cursor-copilot-codex-and.jsonld"}}