---
id: 6798
title: "GhostApproval: A Trust Boundary Gap in AI Coding Assistants"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/ghostapproval-a-trust-boundary-gap-in-ai-coding-assistants"
published_at: "2026-07-08T14:00:00Z"
tags: ["ai-security", "vulnerability-research", "human-in-the-loop", "ai-coding-assistants", "symlink", "cwe-61", "trust-boundary"]
phying_url: "https://phying.com/item/6798"
lang: en
---

# GhostApproval: A Trust Boundary Gap in AI Coding Assistants

## Summary

Wiz Research found GhostApproval, a trust-boundary gap in six AI coding assistants (Amazon Q, Claude Code, Cursor, Windsurf): symlinks plus deceptive prompts let malicious repos bypass human approval.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2026-07-08T14:00:00Z
- **Original:** https://www.wiz.io/blog/ghostapproval-a-trust-boundary-gap-in-ai-coding-assistants
- **Phying News:** https://phying.com/item/6798