Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop

Forever Security found ways to escape the built-in browsers in five AI coding assistants — Cursor, GitHub Copilot, OpenAI's Codex, Microsoft's VS Code and Anthropic's Claude Desktop — letting a web page or local file reach the computer behind the browser. Cursor ran attacker code, Copilot displayed a fake address, and Codex, VS Code and Claude Desktop allowed a single local file to read the rest of the disk. Two of the vulnerabilities remain unpatched.

Forever Security found ways out of the built-in browsers in five AI coding assistants: Cursor, GitHub Copilot, OpenAI’s Codex, Microsoft’s VS Code and Anthropic’s Claude Desktop. In all five, a web page or a local file reached the computer behind the browser. Cursor ran attacker code, Copilot showed a fake address, and Codex, VS Code and Claude Desktop let a single local file read the rest of the disk. Two of those holes are still … More https://www.helpnetsecurity.com/2026/10/29/research-ai-assistant-browser-vulnerabilities/ The post Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop https://www.helpnetsecurity.com/2026/10/29/research-ai-assistant-browser-vulnerabilities/ appeared first on Help Net Security https://www.helpnetsecurity.com .