Advisories Tools Stats Checklist Submit Get the email

IDEs & agents · Cognition

Windsurf

AI IDE (formerly Codeium) with the Cascade agent.

2Advisories

0critical

2high

0medium

2025-08-21Latest

Timeline · advisories per quarter

12025 Q2

12025 Q3

Named in sources

Reported for Windsurf

01. highPrompt injectionWindsurf: prompt injection leaks developer secretsEmbrace The Red showed how prompt injection in files the Cascade agent reads could get Windsurf to leak secrets from the developer’s machine.

Windsurf 2025-08-21

Same pattern

Also worth checking

01. highPrompt injectionMCP tool poisoning: hidden instructions in tool descriptionsAn MCP server can hide instructions inside a tool’s description. The model reads them, the user usually doesn’t, and the agent can be steered into reading files or sending data elsewhere.

MCP SDKs & servers

Claude Code +2 more 2025-04-01