Description
A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 model. It is possible to create a file name that will be appended to the user prompt causing Windsurf to follow its instructions.
Problem types
CWE-1427: Improper Neutralization of Input Used for LLM Prompting
Product status
1.10.7
References
www.tenable.com/security/research/tra-2025-47