Human-in-the-Loop Systems

GhostApproval: Symlink Flaw Lets Malicious Repos Trick AI Coding Assistants

Researchers say deceptive symbolic links can make assistants write into sensitive system files and turn approval prompts into a meaningless step.