Skip to content
OpenAdvisories

Vendor

Windsurf

2 known vulnerabilities.

Products

Windsurf 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.6
    CVE-2025-36730

    Windsurf Prompt Injection via Filename

    A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 model. It is possible to create a file name that will be appended to the user prompt causing Windsurf to follow its instructions.

    Windsurf Windsurf