Agentic IDEs Under Fire: Dissecting the Real CVEs That Exposed Cursor, Windsurf, and Void
Authors:
Idan (Edan) Habler, PhD, Co-Lead, OWASP Securing Agentic Applications
Ken Huang, CEO DistributedApps.ai
Sagiv Antebi, BGU University
In 2025, a new type of Integrated Development Environment (IDE) emerged: Agentic IDEs, which include Large Language Model (LLM) agents directly into the coding workflow. Cursor, Windsurf, and Void offer increased prod…


