Researchers find sandbox-escape flaws in embedded browsers of major AI coding tools
Forever Security says the browsers built into Cursor, GitHub Copilot, Codex, VS Code and Claude Desktop can be escaped to run commands or read files. Some fixes are still pending.