October 15, 2026

The GhostApproval vulnerability lets a malicious repository hijack the approval prompts built into popular AI coding assistants. One booby-trapped symbolic link is enough. The agent writes outside the project folder,