Google Antigravity Fixed Symlink Vulnerability (CVE Pending)
Google Antigravity, an AI coding assistant, fixed the GhostApproval symlink vulnerability. A CVE is pending.
Tag: GhostApproval
Augment Acknowledged GhostApproval Vulnerability, No Fix Yet
Augment, an AI coding assistant, acknowledged the GhostApproval symlink vulnerability but has not yet released a fix. Users are advised not to…
GhostApproval Symlink Flaws Let Malicious Repos Execute Code in AI Coding Assistants
Security researchers at Wiz have identified a critical vulnerability pattern, dubbed GhostApproval, affecting six popular AI coding assistants. The flaw allows a…
CVE-2026-12958: Amazon Q Developer Symlink Vulnerability
A vulnerability in Amazon Q Developer Language Server 1.69.0 and earlier allows malicious repositories to use symlinks to write to sensitive files…
CVE-2026-50549: Cursor Symlink Vulnerability
A vulnerability in Cursor v3.0 and earlier allows malicious repositories to use symlinks to write to sensitive files outside the project directory,…