Windsurf: Memory-Persistent Data Exfiltration (SpAIware Exploit)

In this second post about Windsurf Cascade we are exploring the SpAIware attack, which allows memory persistent data exfiltration. SpAIware is an attack we first successfully demonstrated with ChatGPT last year and OpenAI mitigated. While inspecting the system prompt of Windsurf Cascade I noticed that it has a create_memory tool.

Summary from Embrace The Red.

Explained

The technology and terms in this story. Learn more

More in Vulnerabilities