How the built-in browsers in five AI coding tools broke basic browser rules
Forever Security's EMBRACE research, published on October 29, 2026, found that the browsers built into Cursor, GitHub Copilot, Codex, VS Code and Claude Desktop each broke a basic browser rule: a web page could run commands, read files across the whole disk, or fake the address bar. Cursor was patched on October 1 and the Copilot app fixed in version 1.1.29 on October 13, but Codex and VS Code were still unpatched as of October 29, and the fix status for Claude Desktop was unclear. It matters because these tools work directly on codebases and secrets, and the local-file attack needs just one click on a file:// link that an agent writes.
SOURCES
- Hacker News (AI)2026-10-31 03:32