EMBRACE Attack Exploits Built-in Browsers in Five Major AI Coding Tools

Forever Security's "EMBRACE" research has revealed a vulnerability that breaks three core browser security rules across popular AI coding tools including Cursor, GitHub Copilot, OpenAI's Codex, Microsoft's VS Code, and Anthropic's Claude Desktop. This flaw could allow a malicious page to execute shell commands and compromise the AI agent.