Dev3 min reading time
One symlink trick breaks 6 top AI coding agents, from Amazon
The Next Web
Read the full article
Security firm Wiz discovered a vulnerability called GhostApproval affecting six AI coding assistants, including Amazon Q and Google Antigravity. The flaw exploits symlinks in poisoned repositories to trick agents into modifying sensitive files, granting attackers access to developers' machines. Some affected companies have issued patches, while others have yet to release fixes.
