Researchers Hacked Cursor, GitHub Copilot, Codex, VS Code, and Claude Desktop Embedded Browsers

Security flaws in the embedded browsers of Cursor, GitHub Copilot, Codex, VS Code, and Claude Desktop could enable code execution, file theft, and address-bar spoofing on developer machines. The findings published on October 29 show how browser features built into AI assistants can break security boundaries when given extra access to their host apps.

Reported so far by one publisher.

Summary from Cyber Security News.

Reporting1

CSN Cyber Security News Researchers Hacked Cursor, GitHub Copilot, Codex, VS Code, and Claude Desktop Embedded Browsers · Abinaya 7:18 AM

Related

IMP Cursor's Marketplace Hands Developers a Backdoored Claude Code October 31

CSN Unauthorized OpenAI Codex and Claude Code Relays Disable AI Sandboxes and Redirect Enterprise Data October 29

DR Claude Model Builds Exploits Across Major Browsers & OSes October 29

VG Anthropic restricts Claude Code requests to recreate existing games November 1

Topics Anthropic