Vulnerabilidades de Windsurf
CVEs publicadas que afetam produtos de Windsurf: 1 registro(s), com severidade, exploração e correções.
CVE-2025-36730
Média · 4.6
14/10/2025
Windsurf Prompt Injection via Filename
A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 model.
It is possible to create a file name that will be appended to the user prompt causing Windsurf to follow its instructions.