Windsurf doesn't exist anymore. The codebase it built still does.

“You clicked 'Reject' and it deleted the file anyway.”

One detailed, dated first-person account: explicitly rejecting a change still deleted an entire working file at least twice, requiring git-history recovery. The same account describes the AI rewriting previously-working code while adding unrelated features.

“A fix attempt kept retrying and kept charging you for it.”

A March 2025 report, cross-referenced across Discord and Reddit at the time: the edit tool failing roughly 40 percent of the time while still consuming credits on every retry. One user described their credits gone in two to three days of light use.

“The agent forgot something you told it earlier in the same session.”

Documented in the same first-person account: database schema information supplied earlier repeatedly had to be re-explained, and an unrequested route redirect went out without confirmation.

“A hidden file could read or write anything on disk.”

CVE-2025-62353, CVSS 9.8: a path-traversal bug in Windsurf's own file tools allowed arbitrary file read and write, reachable through a prompt hidden in something as ordinary as a README, even with auto-execution turned off.

“The editor quietly registered a tool server you never approved.”

CVE-2026-30615: malicious HTML content processed by the editor could inject a command that auto-registered a malicious MCP server and executed commands with it, disclosed in April 2026.

“It's built on a browser engine with dozens of known, patched holes.”

The same October 2025 finding that named Cursor also named Windsurf: 94-plus already-patched Chromium vulnerabilities inherited from an old Electron base. Researchers said Windsurf didn't respond to the disclosure at all.