HomeAI · summaries
Storia in 6 fonti
GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents
Wiz says GhostApproval abuses symlinks so AI coding agents write to SSH keys or shell startup files while showing benign paths.
Confronto fonti
6 prospettive sulla stessa storiaTimeline cronologica
- ·
theregister.com
Bug in top AI coding agents shows that Unix-era security headaches never really die
'GhostApproval' problem highlights human-in-the-loop fails
- ·
thenextweb.com
GhostApproval bug breaks 6 top AI coding agents
Wiz's 'GhostApproval' uses an old symlink trick to make six AI coding agents, from Amazon Q to Cursor, write outside the sandbox and hand over the box.
