CVE-2026-10591 - Vulnerability Details

Related Threat Clusters

• Critical RCE Vulnerabilities in Cursor IDE Enable Zero-Click Prompt Injection Attacks

  Cato AI Labs disclosed two critical remote code execution (RCE) vulnerabilities in Cursor IDE, tracked as CVE-2026-50548 and CVE-2026-50549. These vulnerabilities allow attackers to exploit zero-click prompt injection,…

  37 articles · Updated July 1, 2026
• AWS Kiro Vulnerability Allows Remote Code Execution via Hidden Web Text

  A vulnerability in AWS Kiro, an AI-powered IDE, was disclosed on July 21, 2026, allowing attackers to execute code on a developer's machine through a hidden line of text on a webpage. The flaw bypasses Kiro's…

  3 articles · Updated July 22, 2026

Recent Intelligence Reports

• Cymulate, which found — cymulate.com · July 23, 2026
• Hidden Web Text Hijacked Kiro and Ran Attacker Code: AWS Confirms No CVE Assigned — Techtimes · July 22, 2026

Related Entities