July 12, 2026 · 8 min read
The GhostApproval Vulnerability: What It Means for Your AI Coding Toolchain
A critical symlink-following flaw in six major AI coding assistants — including Cursor, Claude Code, and Amazon Q — shows why 'human in the loop' is not a security boundary.