VV-028highPrompt injection2025-08-21
Windsurf: prompt injection leaks developer secrets
Embrace The Red showed how prompt injection in files the Cascade agent reads could get Windsurf to leak secrets from the developer’s machine.
What it is
First post (21 August 2025) in a series on Windsurf vulnerabilities.
How to check
- Update Windsurf; review which tools Cascade can call without approval.
How to fix
- Keep secrets out of the workspace; require approval for network-capable tools.
Sources
More advisories for this tool