2025-12 · 2025-Q4
IDEsaster - 30+ Flaws Across AI Coding Tools
Who actually said "do this"?
- Fixable
- Vendor patch
- Vendor response
- Unknown
- In the wild
- No
- Actor
- Attacker
Target
Cursor, Windsurf, Kiro.dev, Copilot, Zed, Roo Code, Cline, others
Impact
Data exfiltration, RCE, and supply chain compromise across most popular AI IDEs; Windsurf vulnerable to persistent memory poisoning
Root cause
Systemic lack of input validation; persistent memory stores process untrusted content as trusted
Sources
Catalog
Cite this: AgentProv incident record: IDEsaster - 30+ Flaws Across AI Coding Tools (2025-12). https://agentprov.com/incidents/2025-12-idesaster-30-flaws-across-ai-coding-tools
Related
- Also L2 · 2026-10-15Datadog: Counterfeit Policy Text Collapses an Injection Classifier's Recall and Pushes a LangChain Risk Gate Under Its Block ThresholdL2Instruction
- Also L2 · 2026-10-08Cisco Talos: Four Malware Families Carry Instructions Aimed at the LLMs That Triage ThemL2Instruction
- Also L2 · 2026-10-07Barracuda: Phishing Emails Carry Hidden Prompt Injections for the Recipient's AI Inbox AssistantL2Instruction