Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Windsurf Prompt Injection via Filename
Vulnerability Description
A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 model. It is possible to create a file name that will be appended to the user prompt causing Windsurf to follow its instructions.
CVSS Information
N/A
Vulnerability Type
CWE-1427
Vulnerability Title
Windsurf 安全漏洞
Vulnerability Description
Windsurf是Windsurf公司的一款AI编程软件。 Windsurf 1.10.7版本存在安全漏洞，该漏洞源于在Write模式下使用SWE-1模型时可能创建附加到用户提示的文件名，导致Windsurf执行其指令。
CVSS Information
N/A
Vulnerability Type
N/A