Description
A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 model.
It is possible to create a file name that will be appended to the user prompt causing Windsurf to follow its instructions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Windsurf | Windsurf | 1.10.7 | — |