> TritonInfoSec News
Home / Jul 10, 2026 / Story
0
#3 The Hacker News general July 09, 2026 at 04:27 UTC

GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents

By [email protected] (The Hacker News)

AI Summary

Wiz researchers disclosed 'GhostApproval,' a symlink-based attack affecting six AI coding assistants — Amazon Q Developer, Anthropic Claude Code, Augment, Cursor, Google Antigravity, and Windsurf. A malicious repository can trick the agent into writing to sensitive system files while appearing to edit a harmless target, enabling arbitrary code execution on the developer's machine.

Read full article → https://thehackernews.com/2026/07/ghostapproval-sy…

Relevance score: 84.0/100

# More from July 10

  1. 1
    15-Year-Old Linux Vulnerability ‘GhostLock’ Earns Researchers $92k From Google SecurityWeek
  2. 2
    Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges The Hacker News
  3. 4
    GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses The Hacker News
  4. 5
    12 Million Impacted by Data Breach at Japanese Telco KDDI SecurityWeek
  5. 6
    Chrome 150 Update Patches 27 Vulnerabilities SecurityWeek
  6. 7
    New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware The Hacker News
  7. 8
    Interpol cybercrime crackdown nets 5,800 arrests across 97 countries CyberScoop
  8. 9
    Palo Alto Networks Patches 13 Vulnerabilities SecurityWeek
  9. 10
    npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk The Hacker News