Trae IDE ' is a code editor developed by TikTok's ByteDance based on Visual Studio Code (VSCode), and is touted for its free AI coding assistance features. Analysis results for Trae IDE have been ...
A new proof-of-concept attack shows that malicious Model Context Protocol servers can inject JavaScript into Cursor’s browser — and potentially leverage the IDE’s privileges to perform system tasks.
A vulnerability that researchers call CurXecute is present in almost all versions of the AI-powered code editor Cursor, and can be exploited to execute remote code with developer privileges. The ...