Skip to main content

Tag: symlink flaw

1 article

Developer workstation with laptop, terminal, and papers, in a research area with a blurred background.

AI Coding Assistants Exposed to Symlink Flaw

Researchers uncovered a major vulnerability, dubbed GhostApproval, that affects six popular AI coding assistants, allowing attackers to manipulate the code and write malicious data into sensitive files. This flaw uses a clever trick involving deceptively named files and symbolic links to catch AI assistants off guard.

Analyst 207