One symlink trick breaks 6 top AI coding agents, from Amazon

Security firm Wiz discovered a vulnerability called GhostApproval affecting six AI coding assistants, including Amazon Q and Google Antigravity. The flaw exploits symlinks in poisoned repositories to trick agents into modifying sensitive files, granting attackers access to developers' machines. Some affected companies have issued patches, while others have yet to release fixes.