Windsurf Data Exfiltration & SpAIware (Multiple Vectors)
Date: 2025-05
Affected: Windsurf Data Exfiltration & SpAIware (Multiple Vectors)
Attack vector: rce
Category: real-world
Severity: High
CVE: CVE-2025-36730

Multiple vulnerabilities: (a) indirect prompt injection via analyzed files exfiltrating source code and secrets; (b) SpAIware -- persistent memory poisoning allowing long-term malicious instruction storage across sessions; (c) invisible Unicode tag character injection; (d) MCP tool invocation without human-in-the-loop. CVE-2025-36730: prompt injection via filename.


Mitigations:

Architectural layers (MAESTRO):