VULNERABILITY INTELLIGENCE
CVE-2025-36730
EPSS probability0.19%
CISA KEVNot currently listed
Published2025-10-14
Last modified2026-10-19
Description
A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 model. It is possible to create a file name that will be appended to the user prompt causing Windsurf to follow its instructions.