Researchers at Forever Security describe bugs in the built-in browsers of five AI coding tools, including a Cursor prompt injection route to command execution and file read bypasses in Claude Desktop, VS Code and Codex. Cursor and Copilot fixes are reported as shipped, while the VS Code and Codex file read issues are reported as unpatched. No exploitation in the wild is reported. Teams should update Cursor and Copilot and avoid opening untrusted local pages in these embedded browsers.
