CVE-2025-36730 - CERT CVE

  1. CVE-2025-36730

ID CVE-2025-36730
Sažetak A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 model. It is possible to create a file name that will be appended to the user prompt causing Windsurf to follow its instructions.
Reference
CVSS
Base: 0.0
Impact: None
Exploitability:None
Pristup
VektorSloženostAutentikacija
None None None
Impact
PovjerljivostCjelovitostDostupnost
None None None
CVSS vektor None
Zadnje važnije ažuriranje 14-10-2025 - 19:35
Objavljeno 14-10-2025 - 17:15