Topic

Agent Security

Coverage tagged agent security.

Articles: 1
Desk: 1

Data graphic: the EMBRACE attack path in the built-in browsers of AI coding tools, from a clickable file:// link through the embedded browser and a web worker to any local path. One click starts the read; Cursor was patched silently on 1 October, Copilot was fixed in 1.1.29, and Codex and VS Code remain unpatched.

highAI Security Agent Security

EMBRACE: Embedded Browsers in Cursor, Copilot, Claude Desktop, Codex and VS Code Leak Files and Run Code

Forever Security found the built-in browsers in five AI coding tools give pages powers a normal browser withholds. Codex and VS Code remain unpatched.

Oct 31 · 4 min