Security Flaws Found in Five Popular AI Coding Tools, Including OpenAI Codex
THE ELEC
Picture: THE ELEC
Multiple security vulnerabilities have been discovered in five popular artificial intelligence (AI) development tools, potentially allowing hackers to execute code, steal files or manipulate browser address bars. Some flaws in tools including OpenAI’s Codex and Microsoft’s Visual Studio Code (VS Code) remain unpatched, raising concerns for users. The Register reported on Oct. 29 local time that cybersecurity startup Forever Security had identified vulnerabilities in five AI development tools: SpaceXAI’s Cursor, GitHub Copilot, Anthropic’s Claude Desktop, VS Code and Codex. The tools were found to grant embedded browsers capabilities and system access permissions that conventional web browsers do not allow, creating vulnerabilities that could bypass established browser security boundaries. Forever Security named this class of vulnerabilities Embrace (EMbedded BRowser).
This report was first published by THE ELEC. What you see here is a brief excerpt. The full text is theirs.
Continue reading at THE ELEC
