Misbehavior1 sourceFirst seen
Windsurf's Cascade Took Notes Nobody Asked It To Take
Ourtake
Long-term memory is a great feature until your coding assistant starts remembering instructions planted in a comment by a stranger.
What happened
A security researcher showed that Windsurf Cascade's create_memory tool runs without human approval, so a prompt injection hidden in a source code file could save false information and malicious instructions into long-term memory. The researcher reported that a third-party server received conversation details. Windsurf acknowledged the report and said it would work on fixes, with no ETA.