Which tools are affected by EMBRACE?

Cursor, GitHub Copilot, OpenAI's Codex, Microsoft's VS Code and Anthropic's Claude Desktop, according to Forever Security.

Have any of the flaws been fixed?

Cursor was patched October 1 and Copilot in version 1.1.29; Codex and VS Code remained unpatched at publication.

What can teams do in the meantime?

Forever Security's Gal Weizman advises checking every HTML file in those projects for the exploit pattern.

AI Coding AssistantsAI Weekly2h agoOct 30, 2026, 16:00 JST

EMBRACE flaw hits Codex, VS Code, Cursor, Copilot

Send on LINE

3 Key Points

What happened
Forever Security's Gal Weizman detailed EMBRACE, where embedded browsers in Cursor, GitHub Copilot, OpenAI's Codex, Microsoft's VS Code and Anthropic's Claude Desktop loosen real-browser safety rules; Codex (reported July 27) and VS Code (reported September 10) remain unpatched.
Why it matters
Until fixes ship, developers using these five tools may be exposed to attacks that a normal browser would block, according to the researchers.

WHO IT HITSDevelopers using Cursor, GitHub Copilot, OpenAI's Codex, Microsoft's VS Code or Anthropic's Claude Desktop could be exposed to attacks that a normal browser would block until patches ship.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, every morning.

Get these free every morning

Context & Analysis

The EMBRACE findings arrive amid a run of agent-security disclosures, including Anthropic's own chained-exploit write-up a day earlier. Forever Security's report details how each vendor loosened one of three browser safety rules so the AI could preview a project or read what a tab shows. Cursor and GitHub Copilot have since been patched, but Codex and VS Code remained unpatched at publication, with VS Code at around 40 million developers and Codex at more than 5 million weekly users. The inconsistent responses—Microsoft and Anthropic rejecting reports as workspace trust issues, OpenAI silent after the July 27 disclosure—suggest that triage practices, not just code, are part of the story.

FAQ

Which tools are affected by EMBRACE?: Cursor, GitHub Copilot, OpenAI's Codex, Microsoft's VS Code and Anthropic's Claude Desktop, according to Forever Security.
Have any of the flaws been fixed?: Cursor was patched October 1 and Copilot in version 1.1.29; Codex and VS Code remained unpatched at publication.
What can teams do in the meantime?: Forever Security's Gal Weizman advises checking every HTML file in those projects for the exploit pattern.

AI WeeklyRead Original Article

Send on LINE

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Get it free

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.