BREAKING
GhostApproval hits 6 AI coding tools
0
AI assistants affected
0
CWE classes cited
How the symlink trick works
1
Clone malicious repo
↓
2
Ask AI to set up
↓
3
Dialog shows fake name
↓
4
Symlink writes SSH key
Human-in-the-Loop breaks down
Vendor responses vary
Fixed
Patched
●
Amazon Q Developer
●
Cursor v3.0
●
Google Antigravity
●
Claude Code updated
In progress
Unpatched
●
Augment
●
Windsurf
A Unix-era flaw returns
AI NEWS BLITZ
Wiz has disclosed a flaw called GhostApproval affecting six AI coding assistants.