AI IDE MCP Auto-Execution RCE via Malicious mcp.json (CVE-2025-59536, CVE-2025-54136)

Ibrahim Saud@tektrix

•updated Jun 27, 2026•0•0•6

Detects anomalous process spawning behavior initiated by AI IDE extensions (e.g., Amazon Q, Claude Code, Cursor) when loading Model Context Protocol (MCP) configuration files. The rule flags instances where these IDE components trigger suspicious child processes or command-line executions, which could be indicative of remote code execution (RCE) via malicious mcp.json workspace configurations.