How the built-in browsers in five AI coding tools broke basic browser rules
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Forever Security's EMBRACE research says the built-in browsers in five AI coding tools broke basic browser rules. Cursor's agent could receive commands from a web page, the Copilot app's address bar could be spoofed, and local HTML in Codex, VS Code and Claude Desktop could read files outside the project. Cursor and Copilot are patched; Codex and VS Code were not as of October 29, and Claude Desktop's status is unclear. Results are the researchers' own testing, and the Cursor attack is probabilistic.