Oct 29, 2026
Forever Security reports distinct embedded-browser flaws in five coding assistants, with mixed patch status
Forever Security reports embedded-browser weaknesses in Cursor, GitHub Copilot, Claude Desktop, Codex and VS Code, with different impacts including host execution, address spoofing and local-file access. The researchers describe controlled demonstrations and product-specific fixes or unresolved reports; their account does not establish exploitation against users.