# Unpatched flaws in Codex and VS Code expose developers to attack

- URL: https://talkfuse.com/story/researchers-find-bugs-in-5-ai-developer-tools-with-openai-and-microsoft-flaws-still-unpatched/
- Published: 2026-10-29T23:12:26+00:00
- Updated: 2026-10-30T00:13:59+00:00
- Original publisher: The Register
- Original article: https://www.theregister.com/security/2026/10/29/researchers-find-bugs-in-5-ai-developer-tools-with-openai-and-microsoft-flaws-still-unpatched/5306508
- Topics: AI, Art, Culture, Research, Science, Software, Technology

## Key points

- Embedded browsers gave web content unsafe capabilities.
- Codex and VS Code flaws were reported as unpatched.
- GitHub and Cursor issues were fixed.

## Summary

Researchers found vulnerabilities in five AI developer tools that use embedded browsers, which can give web content powers that ordinary browsers restrict. The flaws could enable attackers to run commands on developers’ computers, read files or mislead users about the site they are viewing; researchers say vulnerabilities in OpenAI’s Codex and Microsoft’s VS Code remain unpatched.

The affected tools are Cursor, GitHub Copilot, Claude Desktop, VS Code and Codex. Cursor patched a code-execution flaw on 1 October after disclosure on 10 September, while GitHub fixed Copilot’s address-bar spoofing issue in a 13 October build without receiving the researchers’ report. The researchers said local pages could reach files in Claude Desktop and VS Code through browser workers, while Codex allowed direct file access; Anthropic disputed the Claude report on workspace-trust grounds.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.