Question 1

What is CVE-2025-36730 — CVE-2025-36730?

Accepted Answer

A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 model. It is possible to create a file name that will be appended to the user prompt causing Windsurf to follow its instructions.

Question 2

What is the authoritative source for CVE-2025-36730?

Accepted Answer

CVE-2025-36730 (CVE-2025-36730) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2025-36730CVE-2025-36730

Description

Scoring