LLMMedium
CVE-2025-36730: A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 model.…
- Occurred
- Oct 14, 2025
- Published
- Oct 14, 2025
- Source
- NVD CVE
Summary
A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 model. It is possible to create a file name that will be appended to the user prompt causing Windsurf to follow its instructions.
Tags
- CVE
- CVE-2025-36730
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: Prompt injection vulnerability in an LLM-based tool allowing unauthorized instruction execution.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8