Public story · 2026-02-27 · source-backed
IDEsaster: Every AI IDE's Threat Model Is Broken
Story
The IDEsaster disclosure reveals 30+ vulnerabilities (24 CVEs) across Cursor, Copilot, Windsurf, Zed, Kiro, Roo Code, Junie, and Cline. The fundamental finding: 100% of tested AI IDEs are vulnerable because none accounts for autonomous LLM agent behavior in their threat model. Legacy IDE features (symlink resolution, extension installation, shell execution) become attack vectors when combined with prompt-injectable autonomous agents. This isn't about individual bugs — it's an architectural class failure.
Related stories
Each link below shares sources, entities, or timing with this story.
Shared entities / Same source / Shared topic
IDEsaster: 100% of Tested AI IDEs Vulnerable to Prompt Injection → RCE
Both cover Cline, Cursor, CVEs, IDEsaster; cite the same source (IDEsaster disclosure); overlapping topics (account, agent, attack, autonomou, behavior).
Shared entities / Shared topic / What happened next / Tension
Roo Code Is Dead. 3 Million Installs Disappear Overnight.
Both cover Cline, Copilot, Roo Code; overlapping topics (agent, cline, code, copilot, model); picks up the Cline thread on 2026-04-22.
Shared entities / Shared topic / What happened next
A 54k-star skill that makes Claude talk like a caveman, and the math that deflates it
Both cover Cline, Copilot, Cursor, Windsurf; overlapping topics (agent, code); picks up the Cline thread on 2026-06-12.
Shared entities / Shared topic / What happened next / Tension
CircleCI ships an MCP server wiring pipeline data into coding agents.
Both cover Cursor, Kiro, Windsurf; overlapping topics (agent, attack, code); picks up the Cursor thread on 2026-06-17.
Shared entities / Shared topic / What happened next
superpowers-zh signals the skills layer is going portable.
Both cover Cursor, Kiro, Windsurf; overlapping topics (agent, become, code, copilot); picks up the Cursor thread on 2026-06-07.
Zed Ships Parallel Agents. First IDE Where Two AI Agents Work at the Same Time.
Both cover Copilot, Cursor, Windsurf; overlapping topics (agent, code, copilot, model); picks up the Copilot thread on 2026-04-23.
Shared entities / Shared topic / What happened next / Tension
The config file is the new attack surface, across every IDE.
Both cover Cursor, CVEs, Windsurf; overlapping topics (attack, code); picks up the Cursor thread on 2026-06-26.
Shared entities / Shared topic / What happened next
AI Coding Agents Don't Write Clean Patches. They Can't.
Both cover Copilot, CVEs, LLM; overlapping topics (agent, code, model); picks up the Copilot thread on 2026-05-24.
Source trail
Entities
Provenance
- Canonical issue
- Ramsay Research Agent — 2026-02-27
- AI generated
- no
- Story unit
- 2026-02-27-idesaster-every-ai-ide-s-threat-model-is-broken
- Labels
- source-backed, canonical briefing excerpt