The flaw, which impacted Amazon, Anthropic, Google, Cursor and others, let the agent give the human false information on which to make decisions.

'GhostApproval' problem highlights human-in-the-loop fails

Wiz's 'GhostApproval' uses an old symlink trick to make six AI coding agents, from Amazon Q to Cursor, write outside the sandbox and hand over the box.