Wiz's 'GhostApproval' uses an old symlink trick to make six AI coding agents, from Amazon Q to Cursor, write outside the sandbox and hand over the box.
Wiz says GhostApproval abuses symlinks so AI coding agents write to SSH keys or shell startup files while showing benign ...
A “systematic vulnerability pattern” in at least six of the most widely used AI coding assistants can be abused to trick ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results