Skip to content
GhostApproval: A Trust Boundary Gap in AI Coding Assistants
wiz.io | blog | #ai-security | #vulnerability-research | #human-in-the-loop | #ai-coding-assistants | #symlink | #cwe-61 | #trust-boundary
Summary
Wiz Research found GhostApproval, a trust-boundary gap in six AI coding assistants (Amazon Q, Claude Code, Cursor, Windsurf): symlinks plus deceptive prompts let malicious repos bypass human approval.
- Published
- Collected