Windsurf Prompt Injection via Filename
Tenable disclosed a prompt-injection issue affecting Windsurf where malicious filenames can steer model-agent tools (e.g., read_url_content) into executing unintended actions unless user approval is eā¦
Category: Industry News / Research & Tools / AI Security