Definition
AI coding tools such as Cursor, Copilot, and Codex run a real web browser inside the developer's machine to preview projects. That browser is a security boundary, and researchers found flaws that let an attacker run code, read arbitrary files, or spoof addresses from inside the assistant.
Why it matters
These assistants sit on a developer's workstation with broad access to source code and secrets, so an exploit in the embedded browser can compromise the whole development environment without the user noticing.