Windsurf IDE Zero-Click Prompt Injection via Embedded File Directives (CVE-2026-30615) - ATR-2026-00535 (f7b98a15-03ef-567c-b947-fafdb3f61cbc)
Detects CVE-2026-30615: zero-click prompt injection targeting Windsurf IDE (and same-class AI coding assistants). An attacker plants adversarial instructions inside source files, code comments, or Markdown the developer opens — no interaction required. When Windsurf reads the file for context, the injected text is processed as a directive by the underlying LLM, causing arbitrary tool calls. Attack surfaces include HTML/XML comment blocks prefixed with "AI:", JSON blobs with "role":"system", inline SYSTEM override markers, and invisible Unicode-padded directives. Windsurf-specific patterns include its @-mention syntax abused inside comments and annotation markers. CWE-77 (Command Injection via AI directive), MITRE ATLAS AML.T0051.001 (Indirect Prompt Injection).