One symlink trick breaks 6 top AI coding agents, from Amazon
📰 The Next Web AI
A single symlink trick can compromise 6 top AI coding agents, including Amazon Q, by bypassing safety prompts and granting attackers access to a developer's machine, highlighting a critical security vulnerability in AI coding tools.
Action Steps
- Identify AI coding agents used in your development workflow
- Assess the vulnerability of these agents to symlink attacks
- Update or patch vulnerable agents to prevent exploitation
- Implement additional security measures to protect against similar attacks
- Test and verify the security of your updated workflow
Who Needs to Know This
Developers and security teams working with AI coding agents should be aware of this vulnerability to take necessary precautions and update their tools to prevent such attacks. This affects the security and reliability of AI-assisted development workflows.
Key Insight
💡 A single, old Unix trick can bypass safety prompts in AI coding agents, allowing attackers to gain access to a developer's machine.
Share This
🚨 Symlink trick compromises 6 top AI coding agents! 🚨 Update your tools and patch vulnerabilities to prevent attacks. #AI #Security #Coding
Key Takeaways
A single symlink trick can compromise 6 top AI coding agents, including Amazon Q, by bypassing safety prompts and granting attackers access to a developer's machine, highlighting a critical security vulnerability in AI coding tools.
Full Article
Title: GhostApproval bug breaks 6 top AI coding agents
URL Source: https://thenextweb.com/news/ghostapproval-symlink-flaw-ai-coding-agents
Published Time: 2026-07-08 16:23:16
Markdown Content:
[Skip to content](https://thenextweb.com/news/ghostapproval-symlink-flaw-ai-coding-agents#main)
Toggle Navigation
[](https://thenextweb.com/)
* [News](https://thenextweb.com/)
* Events
* [TNW Conference June 19 & 20, 2025](https://thenextweb.com/conference)
* [All events](https://thenextweb.com/events)
* * *
* [Newsletters](https://thenextweb.com/newsletters)
* [Partner with us](https://thenextweb.com/partnerships)
* [](https://facebook.com/thenextweb)
* [](https://www.instagram.com/thenextweb)
* [](https://twitter.com/thenextweb)
* [](https://youtube.com/user/thenextweb)
* [](https://flipboard.com/@thenextweb)
* [](https://thenextweb.com/newsletters)
* [Jobs](https://thenextweb.homerun.co/)
* [Contact](https://thenextweb.com/cdn-cgi/l/email-protection#03606c6d656671666d606643776b666d667b777466612d606c6e)
[](https://thenextweb.com/)News
* [Latest](https://thenextweb.com/latest)
* [Deep tech](https://thenextweb.com/deep-tech)
* [Sustainability](https://thenextweb.com/sustainability)
* [Ecosystems](https://thenextweb.com/ecosystems)
* [Data and security](https://thenextweb.com/data-security)
* [Fintech and ecommerce](https://thenextweb.com/fintech-ecommerce)
* [Future of work](https://thenextweb.com/future-of-work)
* [Conference media hub](https://thenextweb.com/topic/tnw-conference)
* More
* [Startups and technology](https://thenextweb.com/startups-technology)
* [Investors and funding](https://thenextweb.com/investors-funding)
* [Government and policy](https://thenextweb.com/government-policy)
* [Corporates and innovation](https://thenextweb.com/corporates-innovation)
* [Podcast](https://fast.wistia.com/embed/channel/hckmzyzq7e)
* [Amazon](https://thenextweb.com/amazon)
# One symlink trick breaks 6 top AI coding agents, from Amazon
Security firm Wiz found one old Unix trick that breaks six popular AI coding assistants, from Amazon Q to Cursor. A booby-trapped repository can walk an agent past its own safety prompt. The payoff is a planted key that hands an attacker the developer's machine.
July 8, 2026 - 4:23 pm
[](https://www.facebook.com/sharer/sharer.php?s=100&p[url]=https://thenextweb.com/news/ghostapproval-symlink-flaw-ai-coding-agents%3Futm_source%3Dfacebook%26utm_medium%3Dshare%26utm_campaign%3Darticle-share-button&p[title]=One%20symlink%20trick%20breaks%206%20top%20AI%20coding%20agents%2C%20from%20Amazon&p[images][0]=https%3A%2F%2Fmedia.thenextweb.com%2F2022%2F05%2FAI-machine-learning-backdoors.avif&u=https://thenextweb.com/news/ghostapproval-symlink-flaw-ai-coding-agents&t=One%20symlink%20trick%20breaks%206%20top%20AI%20coding%20agents%2C%20from%20Amazon)[](https://twitter.com/intent/tweet?url=https://thenextweb.com/news/ghostapproval-symlink-flaw-ai-coding-agents%3Futm_source%3Dtwitter%26utm_medium%3Dshare%26utm_campaign%3Darticle-share-button%26referral&via=thenextweb&related=thenextweb&text=One%20symlink%20trick%20breaks%206%20top%20AI%20coding%20agents%2C%20from%20Amazon)[](https://share.flipboard.com/bookmarklet/popout?url=https://thenextweb.com/news/ghostapproval-symlink-flaw-ai-coding-agents%3Futm_source%3Dflipboard%26utm_medium%3Dshare%26utm_campaign%3Darticle-share-button)[](https://www.linkedin.com/shareArticle/?mini=true&url=https://thenextweb.com/news/ghostapproval-symlink-flaw-ai-coding-agents%3Futm_source%3Dlinkedin%26utm_medium%3Dshare%26utm_campaign%3Darticle-share-button)[](https://t.me/share/url?url=https://thenextweb.com/news/ghostapproval-symlink-flaw-ai-coding-agents%3Futm_source%3Dtelegram%26utm_medium%3Dshare%26utm_campaign%3Darticle-share-button)[](https://thenextweb.com/cdn-cgi/l/email-protection#81bef2f4e3ebe4e2f5bcceefe4a1f2f8ecede8efeaa1f5f3e8e2eaa1e3f3e4e0eaf2a1b7a1f5eef1a1c0c8a1e2eee5e8efe6a1e0e6e4e
URL Source: https://thenextweb.com/news/ghostapproval-symlink-flaw-ai-coding-agents
Published Time: 2026-07-08 16:23:16
Markdown Content:
[Skip to content](https://thenextweb.com/news/ghostapproval-symlink-flaw-ai-coding-agents#main)
Toggle Navigation
[](https://thenextweb.com/)
* [News](https://thenextweb.com/)
* Events
* [TNW Conference June 19 & 20, 2025](https://thenextweb.com/conference)
* [All events](https://thenextweb.com/events)
* * *
* [Newsletters](https://thenextweb.com/newsletters)
* [Partner with us](https://thenextweb.com/partnerships)
* [](https://facebook.com/thenextweb)
* [](https://www.instagram.com/thenextweb)
* [](https://twitter.com/thenextweb)
* [](https://youtube.com/user/thenextweb)
* [](https://flipboard.com/@thenextweb)
* [](https://thenextweb.com/newsletters)
* [Jobs](https://thenextweb.homerun.co/)
* [Contact](https://thenextweb.com/cdn-cgi/l/email-protection#03606c6d656671666d606643776b666d667b777466612d606c6e)
[](https://thenextweb.com/)News
* [Latest](https://thenextweb.com/latest)
* [Deep tech](https://thenextweb.com/deep-tech)
* [Sustainability](https://thenextweb.com/sustainability)
* [Ecosystems](https://thenextweb.com/ecosystems)
* [Data and security](https://thenextweb.com/data-security)
* [Fintech and ecommerce](https://thenextweb.com/fintech-ecommerce)
* [Future of work](https://thenextweb.com/future-of-work)
* [Conference media hub](https://thenextweb.com/topic/tnw-conference)
* More
* [Startups and technology](https://thenextweb.com/startups-technology)
* [Investors and funding](https://thenextweb.com/investors-funding)
* [Government and policy](https://thenextweb.com/government-policy)
* [Corporates and innovation](https://thenextweb.com/corporates-innovation)
* [Podcast](https://fast.wistia.com/embed/channel/hckmzyzq7e)
* [Amazon](https://thenextweb.com/amazon)
# One symlink trick breaks 6 top AI coding agents, from Amazon
Security firm Wiz found one old Unix trick that breaks six popular AI coding assistants, from Amazon Q to Cursor. A booby-trapped repository can walk an agent past its own safety prompt. The payoff is a planted key that hands an attacker the developer's machine.
July 8, 2026 - 4:23 pm
[](https://www.facebook.com/sharer/sharer.php?s=100&p[url]=https://thenextweb.com/news/ghostapproval-symlink-flaw-ai-coding-agents%3Futm_source%3Dfacebook%26utm_medium%3Dshare%26utm_campaign%3Darticle-share-button&p[title]=One%20symlink%20trick%20breaks%206%20top%20AI%20coding%20agents%2C%20from%20Amazon&p[images][0]=https%3A%2F%2Fmedia.thenextweb.com%2F2022%2F05%2FAI-machine-learning-backdoors.avif&u=https://thenextweb.com/news/ghostapproval-symlink-flaw-ai-coding-agents&t=One%20symlink%20trick%20breaks%206%20top%20AI%20coding%20agents%2C%20from%20Amazon)[](https://twitter.com/intent/tweet?url=https://thenextweb.com/news/ghostapproval-symlink-flaw-ai-coding-agents%3Futm_source%3Dtwitter%26utm_medium%3Dshare%26utm_campaign%3Darticle-share-button%26referral&via=thenextweb&related=thenextweb&text=One%20symlink%20trick%20breaks%206%20top%20AI%20coding%20agents%2C%20from%20Amazon)[](https://share.flipboard.com/bookmarklet/popout?url=https://thenextweb.com/news/ghostapproval-symlink-flaw-ai-coding-agents%3Futm_source%3Dflipboard%26utm_medium%3Dshare%26utm_campaign%3Darticle-share-button)[](https://www.linkedin.com/shareArticle/?mini=true&url=https://thenextweb.com/news/ghostapproval-symlink-flaw-ai-coding-agents%3Futm_source%3Dlinkedin%26utm_medium%3Dshare%26utm_campaign%3Darticle-share-button)[](https://t.me/share/url?url=https://thenextweb.com/news/ghostapproval-symlink-flaw-ai-coding-agents%3Futm_source%3Dtelegram%26utm_medium%3Dshare%26utm_campaign%3Darticle-share-button)[](https://thenextweb.com/cdn-cgi/l/email-protection#81bef2f4e3ebe4e2f5bcceefe4a1f2f8ecede8efeaa1f5f3e8e2eaa1e3f3e4e0eaf2a1b7a1f5eef1a1c0c8a1e2eee5e8efe6a1e0e6e4e
DeepCamp AI