https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:03:03.959119+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-254927 EUVD-2026-254927 2026-10-02T12:03:04.002618+00:00 EUVD-2026-254927 https://cve.radiocsirt.org/vuln/fkie_cve-2025-36730 fkie_cve-2025-36730 2026-10-02T12:03:04.002652+00:00

A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 model.

It is possible to create a file name that will be appended to the user prompt causing Windsurf to follow its instructions.

 https://cve.radiocsirt.org/vuln/ghsa-6mh4-fc28-667v GHSA-6mh4-fc28-667v 2026-10-02T12:03:04.002684+00:00

A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 model.

It is possible to create a file name that will be appended to the user prompt causing Windsurf to follow its instructions.