The report describes three risks: command execution through Cursor, a spoofed address display in Copilot and local-file reads through Codex, VS Code and Claude Desktop previews. These demonstrations have opening and interaction requirements; they do not establish an ongoing attack campaign.
Researchers report fixes for the relevant Cursor and Copilot issues. At publication they identify no fix for Codex or VS Code and no identifiable fixed Claude Desktop version. Those findings are dated to the report, without assuming they describe every current version.