AgentProv
← All incidents
2025-12 · 2025-Q4

IDEsaster - 30+ Flaws Across AI Coding Tools

Layer tags: not yet tagged.

Target

Cursor, Windsurf, Kiro.dev, Copilot, Zed, Roo Code, Cline, others

Impact

Data exfiltration, RCE, and supply chain compromise across most popular AI IDEs; Windsurf vulnerable to persistent memory poisoning

Root Cause

Systemic lack of input validation; persistent memory stores process untrusted content as trusted

View this entry in the catalog