Vulnerabilityhigh
Researcher Uncovers 30+ Flaws in AI Coding Tools Enabling Data Theft and RCE Attacks
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-49150 | Cursor: By default, the setting json.schemaDownload.enable was set to True. This means that by writing a JSON file, an attacker can… | 5.9 | <1% | ||
| CVE-2025-53097 | Roo Code: There was an issue where the Roo Code agent's `search_files` tool did not respect the setting to disable reads outside of the VS… | 7.5 | <1% | ||
| CVE-2025-53536 | Roo Code: If the victim had "Write" auto-approved, an attacker with the ability to submit prompts to the agent could write to VS Code… | 8.1 | <1% | ||
| CVE-2025-53773 | Improper neutralization of special elements used in a command ('command injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to… | 7.8 | 3% | PoC | |
| CVE-2025-54130 | Cursor: Cursor allows writing in-workspace files with no user approval in versions less than 1.3.9. If the file is a dotfile, editing it… | 9.8 | <1% | ||
| CVE-2025-55012 | Zed: In the Zed Agent Panel allowed for an AI agent to achieve Remote Code Execution (RCE) by bypassing user permission checks. An AI… | 8.5 | <1% | ||
| CVE-2025-58335 | In JetBrains Junie before 252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61, 243.284.61, 252.284.50, 252.284.54, 251.284.54, 251.284.50, 243.284.54… | 7.5 | <1% | ||
| CVE-2025-58372 | Roo Code: Versions 3.25.23 and below contain a vulnerability where certain VS Code workspace configuration files (.code-workspace) are not… | 9.8 | <1% | ||
| CVE-2025-61260 | A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration… | 9.8 | 7% | ||
| CVE-2025-61590 | Cursor: Versions 1.6 and below are vulnerable to Remote Code Execution (RCE) attacks through Visual Studio Code Workspaces. Workspaces… | 7.5 | <1% | ||
| CVE-2025-64660 | Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network | 8.0 | <1% |
From the original article
5 min read at thehackernews.com
Ravie Lakshmanan Dec 06, 2025 AI Security / Vulnerability Over 30 security vulnerabilities have been disclosed in various artificial intelligence (AI)-powered Integrated Development Environments (IDEs) that combine prompt injection primitives with legitimate features to achieve data exfiltration and remote code execution.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.