dhawaldesai/agentic-ioc-scanner

PoC

IOC scanner for agentic AI coding tools — detects Mini Shai-Hulud, Gemini CLI RCE, Cursor CVE-2026-26268, and DPRK PromptMink.

view exploit source poc_in_githubauthor dhawaldesaipublished 2026-05-05catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-26268US	critical9.9OT high	0.70% (53rd)	Exploit	2026-02-13
Cursor is a code editor built for programming with AI. Sandbox escape via writing .git configuration was possible in versions prior to 2.5. A malicious agent (ie prompt injection)…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.