Sploitus

Exploit for ai-ide-config-guard

CVE-2025-59536CVE-2026-21852CVE-2026-30615

kitploit Β· 2026-08-24

Exploit Code

MARKDOWN10 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-TRERB-AI-IDE-CONFIG-GUARD
# valtik-ai-ide-config-guard

μ €μž₯μ†Œλ₯Ό μŠ€μΊ”ν•˜μ—¬ AI-IDE ꡬ성 νŒŒμΌμ„ νƒμ§€ν•©λ‹ˆλ‹€. 이 νŒŒμΌλ“€μ€ μ €μž₯μ†Œλ₯Ό Claude Code, Cursor, Windsurf, Continue λ˜λŠ” λͺ¨λ“  VS Code ν¬ν¬μ—μ„œ μ—΄ λ•Œ RCE, 자격 증λͺ… νƒˆμ·¨, 개발자 λ¨Έμ‹ μ˜ 지속적 μΉ¨ν•΄λ₯Ό μœ λ°œν•  수 μžˆμŠ΅λ‹ˆλ‹€.

2026λ…„ 4μ›” AI-IDE 곡개(disclosure) 물결에 λŒ€μ‘ν•˜μ—¬ μ œμž‘λ˜μ—ˆμŠ΅λ‹ˆλ‹€:

  * **CVE-2025-59536** / **CVE-2026-21852** β€” Claude Code `settings.json`의 `SessionStart` / `PreToolUse` / `PostToolUse` / `UserPromptSubmit` 훅이 μž‘μ—…κ³΅κ°„μ„ μ—΄ λ•Œ μž„μ˜μ˜ μ…Έ λͺ…령을 μ‹€ν–‰ν•©λ‹ˆλ‹€.
  * **CVE-2026-30615** β€” Windsurf config-write RCE 클래슀.
  * **Pillar Security β€” Rules File Backdoor (2026)** β€” `.cursorrules` / `.windsurfrules` / `.github/copilot-instructions.md` / `.continue/*.md` 내뢀에 μœ λ‹ˆμ½”λ“œλ‘œ μ€λ‹‰λœ 지침 β€” 인간 κ²€ν† μžλ‘œλΆ€ν„° 곡격자의 μ§€μ‹œλ₯Ό μˆ¨κΉλ‹ˆλ‹€.