Over 30 security vulnerabilities have been disclosed in various artificial intelligence (AI)-powered Integrated Development Environments (IDEs) that combine prompt injection primitives with legitimate features to achieve data exfiltration and remote code execution. The security shortcomings have been collectively named IDEsaster by security researcher Ari Marzouk (MaccariTA). They affect popular
You must log in or # to comment.
lol, lmao
Flaws or features
Cybersecurity researchers are amazing at naming stuff
Here’s the CVE author’s post on the issue if you’d like a more thorough explanation: https://maccarita.com/posts/idesaster/


