CNNVD-202510-2484 Information

CNNVD ID

CNNVD-202510-2484

CVE-2025-62353

  • CNNVD Published: 2025-10-17

Description (Chinese)

Windsurf是Windsurf公司的一款AI编程软件。 Windsurf存在安全漏洞,该漏洞源于存在路径遍历漏洞,可能导致读取和写入任意本地文件。

Description (English)

Windsurf is an AI programming software for Windsurf. There is a security loophole in Windsurf, which stems from a loophole in the path, which may lead to reading and writing of any local document.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Windsurf

Published

2025-10-17

Last Modified

2026-02-24

References

https://hiddenlayer.com/sai_security_advisor/2025-10-windsurf/ https://access.redhat.com/security/cve/cve-2025-62353

Share on: