Threat
Researchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatched
First reported theregister.com
Page published
Earliest dated coverage: 29 Oct 2026 · First observed: 29 Oct 2026 · Latest dated coverage: 29 Oct 2026
Coverage timeline
Single-source research — one report is available.
Why it matters
The Embrace vulnerabilities show how privileged embedded browsers can let untrusted web content cross into coding-agent instructions and host access, exposing developer machines and files.
Forever Security reported “Embrace” embedded-browser vulnerabilities in Cursor, GitHub Copilot, Claude Desktop, VS Code, and OpenAI Codex, enabling host code execution, data theft, or address-bar spoofing depending on the tool. In Cursor, web pages could secretly pass instructions to the agent’s composer, creating a prompt-injection path to host command execution. Cursor and Copilot received fixes, while the researchers said Codex and VS Code remained unpatched.