Embedded-browser flaws found in five AI coding tools, two remain unpatched

Security firm Forever Security found vulnerabilities dubbed 'Embrace' in the embedded browsers of Cursor, GitHub Copilot, Claude Desktop, VS Code and Codex, enabling code execution, file theft or address-bar spoofing; Cursor and Copilot were patched, but OpenAI's Codex and Microsoft's VS Code flaws remain unpatched after being dismissed as invalid.

Disclosed 29 October 2026 · Record updated 30 October 2026

Impact

Flaws could allow attackers to execute arbitrary code, read and steal local files, or spoof browser address bars in affected AI coding tools; two vendors (OpenAI and Microsoft) have not patched the issues.

Our coverage

A browser window embedded in a code editor rusts open like a broken door, files spilling across a desk while two figures turn away, refusing to look.

Vulnerabilities

Embedded browsers in five AI coding tools found to leak files

Forever Security says OpenAI's Codex and Microsoft's VS Code remain unpatched after both vendors dismissed the reports as invalid.

30 Oct 2026

Sources

theregister.comhttps://theregister.com/security/2026/10/29/researchers-find-bugs-in-5-ai-developer-tools-with-openai-and-microsoft-flaws-still-unpatched/5306508