Over 30 Security Vulnerabilities Discovered in AI-Powered Coding IDEs Enabling Data Theft and Remote Code Execution

Summary

Security researchers have disclosed more than 30 vulnerabilities across major AI-powered Integrated Development Environments (IDEs) and coding assistants, including Cursor (CVE-2025-49150), Roo Code (CVE-2025-53097), JetBrains Junie (CVE-2025-58335), GitHub Copilot, Kiro.dev, and Claude Code. The flaws combine prompt injection primitives with legitimate tool features to enable data exfiltration and remote code execution. These attack chains differ from previously known prompt injection exploits