AIThe Registerabout 2 hours ago
GhostApproval bug hits six AI coding agents
6 min read
Wiz discovered GhostApproval, a vulnerability in six AI coding assistants including Amazon Q Developer, Anthropic Claude Code, and Cursor. The flaw uses symlinks to trick agents into writing to sensitive files outside the workspace sandbox, enabling remote code execution. Amazon, Cursor, and Google fixed the flaw; Anthropic declined to patch.
Level
Hype check
Tap to vote and see what everyone thinks.
