The Browser Inside Your Coding Assistant Can Read Your Files, Researchers Say. Two Are Still Open

Researchers at the security firm Forever Security say the small web browsers built into five AI coding assistants (Cursor, GitHub Copilot, OpenAI's Codex, Microsoft's VS Code and Anthropic's Claude Desktop) "broke a core browser-security rule in every one." They say the impact ranged from a page getting code running on the computer (Cursor), to one click on a file link inside a project letting a page read every file on the disk (Codex, VS Code and Claude Desktop), to a page faking its own address (GitHub Copilot). The research was published October 29, 2026; no CVE numbers have been published.