Researchers find bugs in five AI developer tools, OpenAI and Microsoft flaws unpatched

Forever Security found a class of flaws dubbed Embrace in the embedded browsers of Cursor, GitHub Copilot, Claude Desktop, VS Code and Codex. They enable code execution, file theft and address-bar spoofing, with Codex and VS Code still unpatched.

• Cursor silently patched its flaw on October 1 without an advisory
• GitHub fixed Copilot address-bar spoofing in build 1.1.29
• Anthropic rejected the report but accepted an identical one from Noma Security
• Codex and Microsoft's VS Code flaws remain unpatched