Windsurf

2 CVEs across 1 Windsurf products. Browse Windsurf vulnerabilities, severities, and proof-of-concept exploits.

Windsurf products with known CVEs

ProductCVEs
Windsurf2
Windsurf CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-62353Critical9.82025-10-17A path traversal vulnerability in all versions of the Windsurf IDE enables a threat actor to read and write arbitrary local files in and outside of current pro…
CVE-2025-367302025-10-14A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 model. It is possible to create a file name that will be appende…