Windsurf Memory-Persistent Data Exfiltration (SpAIware)
Date: 2025-08
Affected: Windsurf (Codeium)
Attack vector: memory-poisoning
Category: research
Severity: Critical

Indirect prompt injection abused Windsurf's create_memory tool without approval to persist malicious instructions, enabling continuous data exfiltration across sessions.


Mitigations:

Architectural layers (MAESTRO):