Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop

Forever Security found ways out of the built-in browsers in five AI coding assistants - Cursor, GitHub Copilot, OpenAI’s Codex, Microsoft’s VS Code and Anthropic’s Claude Desktop - Help Net Security reports. In all five, a web page or a local file could reach the computer behind the browser, and two of the holes are still unpatched.