MediumVulnerabilityLLM-specific
CVE-2025-36730: Windsurf prompt injection via crafted file name in Write mode
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2025-36730
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.2%
Summary
CVE-2025-36730 describes a prompt injection vulnerability in Windsurft version 1.10.7 when used in Write mode with the SWE-1 model. An attacker can create a file name that is appended to the user prompt, causing Windsurf to follow instructions embedded in that name. Tenable Network Security, Inc. is the CNA, rating it CVSS 4.0 MEDIUM (4.6), and NIST has not yet provided an assessment.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Topics
Related items
- LowSocial Engineering AI Agents: The New BEC for 2026Similar attack · Dark Reading
- MediumGHSA-hmq2-7hp6-7crh: Banks: User-controlled prompt input can be parsed as privileged chat messagesSimilar attack · GitHub Advisory Database
- CriticalGHSA-9mp3-24cc-77mg: PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool CallsSimilar attack · GitHub Advisory Database
- Medium'AgentCorruption' Puts AWS Environments At Risk With Single PromptSimilar attack · Dark Reading
- MediumGHSA-4xxv-6wmf-xf45: PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspaceSimilar attack · GitHub Advisory Database