CVE-2026-12957 | byteiota

Tag: CVE-2026-12957

Cursor IDE with broken sandbox icon and red warning indicators representing the DuneSlide prompt injection RCE vulnerability CVE-2026-50548

Security

Cursor DuneSlide: Prompt Injection RCE in CVE-2026-50548

Two CVSS 9.8 flaws in Cursor IDE let prompt injection escape the sandbox and run ...

July 2, 2026

VS Code editor with Amazon Q extension showing malicious MCP config file stealing AWS credentials - CVE-2026-12957

Security

CVE-2026-12957: Amazon Q Silently Stole Your AWS Keys

Amazon Q Developer auto-executed MCP configs from cloned repos, handing attackers your AWS credentials. CVE-2026-12957 ...

June 29, 2026