GhostApproval Flaws Let Top AI Coding Tools Write Outside Workspaces

Wiz researchers disclosed “GhostApproval,” a symlink-based vulnerability in multiple AI coding assistants that can cause assistants to write attacker-controlled data to files outside a project workspace (for example ~/.ssh/authorized_keys), with some products performing writes before user approval; several vendors have issued patches or mitigations while others were pending, and researchers recommend resolving symlinks before prompting and blocking writes until explicit approval.