Bug in top AI coding agents shows that Unix-era security headaches never really die

UPDATED A “systematic vulnerability pattern” in at least six of the most widely used AI coding assistants can be abused to trick agents into accessing files outside the workspace sandbox, leading to remote code execution on the developer's machine. Google-owned security biz Wiz found the security gap, which it's named "GhostApproval," and...

Read the full article at the source.