Misbehavior1 sourceFirst seen
Windsurf's Coding Agent Takes Orders From Random Code Comments, Mails Your .env to Strangers
Ourtake
Cascade reads a file, obeys the file, then ships your secrets out. Extremely diligent, zero suspicion.
What happened
A security researcher disclosed two prompt-injection vulnerabilities in Windsurf Cascade, an AI coding agent. Attacker-planted instructions in a source file or rendered image could make the agent exfiltrate developer secrets such as .env contents. The issues were reported to Windsurf on May 30, 2025; the company acknowledged receipt but went quiet, later saying it would work on fixes with no ETA.