URL has been copied successfully!
GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents
URL has been copied successfully!

Collecting Cyber-News from over 60 sources

GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents


Tags: , , , , ,

Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer’s computer. The assistant asks permission to edit one harmless-looking file, but the write lands on a sensitive one instead.The affected tools are Amazon Q Developer, Anthropic’s Claude Code, Augment, Cursor, Google Antigravity, and Windsurf.

First seen on thehackernews.com

Jump to article: thehackernews.com/2026/07/ghostapproval-symlink-flaws-could-let.html

Loading

Share via Email
Share on Facebook
Tweet on X (Twitter)
Share on Whatsapp
Share on LinkedIn
Share on Xing
Copy link

also interesting:

  1. Cybersecurity Snapshot: AI Will Take Center Stage in Cyber in 2026, Google Says, as MITRE Revamps ATTCK Framework
  2. Cybersecurity Snapshot: Global Agencies Target Criminal “Bulletproof” Hosts, as CSA Unveils Agentic AI Risk Framework
  3. Security researchers caution app developers about risks in using Google Antigravity
  4. Lack of isolation in agentic browsers resurfaces old vulnerabilities