Several AI coding assistants were tricked into facilitating developer machine hacking via an attack technique that has been known for decades.

'GhostApproval' problem highlights human-in-the-loop fails

Wiz's 'GhostApproval' uses an old symlink trick to make six AI coding agents, from Amazon Q to Cursor, write outside the sandbox and hand over the box.