CVE-2025-36730

N/A

Beschreibung

A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 model. It is possible to create a file name that will be appended to the user prompt causing Windsurf to follow its instructions.

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht10/14/2025

Zuletzt geandert10/14/2025

Quellenvd

Honeypot-Sichtungen0

Referenzen

https://www.tenable.com/security/research/tra-2025-47(vulnreport@tenable.com)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.