AIThe Next Webabout 3 hours ago
One symlink trick breaks 6 top AI coding agents, from Amazon
1 min read
Wiz found a flaw called GhostApproval in six AI coding agents including Amazon Q Developer and Cursor. A poisoned repository uses a symlink to trick an agent into writing an attacker-controlled SSH key. The confirmation box hides the real file target, making user approval meaningless.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyAmazon
