{
 "license": "CC-BY-4.0",
 "attribution": "Fide AI, Agentic Cyber Explorer",
 "url": "https://agentic-cyber-explorer.pages.dev/events/forever-security-embrace-embedded-browsers-2026/",
 "asOf": "2026-10-30",
 "id": "forever-security-embrace-embedded-browsers-2026",
 "date": "2026-10-29",
 "datePrecision": "day",
 "title": "Forever Security reports distinct embedded-browser flaws in five coding assistants, with mixed patch status",
 "lane": "attack",
 "kind": "vulnerability-disclosure",
 "summary": "Forever Security reports embedded-browser weaknesses in Cursor, GitHub Copilot, Claude Desktop, Codex and VS Code, with different impacts including host execution, address spoofing and local-file access. The researchers describe controlled demonstrations and product-specific fixes or unresolved reports; their account does not establish exploitation against users.",
 "whyItMatters": "It identifies the embedded browser and its application bridges as additional trust boundaries in agent products.",
 "actors": [
  "forever-security",
  "cursor",
  "github",
  "anthropic",
  "openai",
  "microsoft"
 ],
 "topics": [
  "tool-and-mcp-security",
  "prompt-injection",
  "data-exfiltration",
  "sandbox-containment"
 ],
 "atlas": [
  "untrusted-content",
  "tools",
  "sandbox"
 ],
 "artifacts": [],
 "sources": [
  {
   "url": "https://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers",
   "publisher": "Forever Security",
   "title": "EMBRACE: How We Hacked the Browsers Embedded in Top Five Desktop AI Assistants",
   "date": "2026-10-29",
   "type": "primary",
   "accessed": "2026-10-30"
  },
  {
   "url": "https://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers-technical",
   "publisher": "Forever Security",
   "title": "EMBRACE: [Technical Overview] How We Hacked the Browsers Embedded in Top Five Desktop AI Assistants",
   "date": "2026-10-29",
   "type": "primary",
   "accessed": "2026-10-30"
  }
 ],
 "keyFacts": [
  {
   "fact": "The researcher reports Cursor fixed on October 1 and Copilot fixed in version 1.1.29 on October 13. At publication it described Codex and VS Code as unresolved; Claude Desktop remediation was not established.",
   "locator": "Technical companion, product Resolution sections"
  },
  {
   "fact": "The Cursor demonstration depended on agent behavior and a user keystroke. The local-file demonstrations required opening local content; the report does not show every ordinary remote page can read a host filesystem.",
   "locator": "Technical companion, Cursor Impact; Local File Read, Delivery"
  },
  {
   "fact": "Patch states and disclosure responses are the researcher’s account as of October 29, not independent vendor confirmations or proof that all versions share the same exposure.",
   "locator": "Disclosure; technical companion, Resolution sections"
  }
 ],
 "significance": 4,
 "fideQuestions": [],
 "methods": [
  "indirect-prompt-injection"
 ],
 "review": "assistant-drafted",
 "addedOn": "2026-10-30",
 "revisions": []
}