---
title: "[AUTO] The Design Flaw in AI Developer Tools' Embedded Browsers"
pubDatetime: 2026-10-30T07:15:00.000Z
description: "Forever Security found a systemic vulnerability pattern in five AI tools: embedded browsers with agent-level access."
tags: [ai-security, vulnerability, developer-tools, openai, microsoft, 2026, 2026-q4, 2026-10, AUTO]
---
A researcher at Forever Security found the same root problem in five AI developer tools: [embedded browsers granted agentic capabilities](https://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers). Cursor, GitHub Copilot, Claude Desktop, VS Code, and OpenAI's Codex all fell to escalating attacks.

The bugs followed a pattern. Cursor: code injection to arbitrary execution. Copilot: address bar spoofing for phishing. Codex, Claude Desktop, and VS Code: forced file reads of credentials and SSH keys.

Three vendors patched quickly. Cursor and Copilot fixed the issues within weeks; Claude Desktop accepted and fixed the disclosure. OpenAI and Microsoft didn't. As of late October, Codex and VS Code remained unpatched.

The pattern matters more than the bugs. Giving a browser agent-level powers breaks the browser's threat model. A traditional browser trusts only the rendered website; an agentic one must also trust its own tools. Wire those together poorly, and the tool can be tricked into reading credentials or running arbitrary code.

Vendor prioritization explains the divergence.

---

*Sources: [Embrace: Hacking 5 AI Assistants' Embedded Browsers](https://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers)*

*Coverage: [The Register](https://www.theregister.com/security/2026/10/29/researchers-find-bugs-in-5-ai-developer-tools-with-openai-and-microsoft-flaws-still-unpatched/5306508)*

*Related on this blog: [[AUTO] When Patch Volume Becomes the Problem](/posts/auto-patch-tuesday-prioritization)  •  [[AUTO] One-Click Data Drain in Copilot](/posts/auto-copilot-data-drain)  •  [[AUTO] The AI that explained how to hack itself](/posts/auto-cosnitch-discovery)*