New GhostApproval Vulnerability Affects Amazon Q, Claude Code, Cursor, and Other AI Agents

Cybersecuritynews •Guru Baran • July 9, 2026

A newly disclosed vulnerability pattern dubbed “GhostApproval” has exposed a critical security flaw in six of the most widely used AI coding assistants: Amazon Q Developer, Anthropic Claude Code, Augment, Cursor, Google Antigravity, and Windsurf, allowing malicious repositories to bypass Human-in-the-Loop safety controls and potentially achieve remote code execution on developer machines. Discovered by Wiz […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GhostApproval Vulnerability Exposes AI Coding Assistants to Remote Code Execution A vulnerability named GhostApproval has been discovered in six major AI coding assistants, including Amazon Q Developer, Anthropic Claude Code, Augment, Cursor, Google Antigravity, and Windsurf. This flaw allows malicious repositories to trick AI agents into accessing files outside their designated workspaces, potentially leading to remote code execution on developers' machines. The vulnerability exploits symbolic links (symlinks) to bypass security controls, with attackers able to write sensitive data, such as SSH keys, to unauthorized locations. Wiz reported the issue, and while Amazon, Google, and Cursor have issued patches, Augment and Windsurf have not yet remediated the vulnerability. The flaw highlights significant trust boundary gaps in AI coding tools that rely on user approval for actions. Current status indicates that while some vendors have acted, others remain vulnerable, posing a risk to enterprises utilizing these tools. 17 sources 71

Extracted Entities

New GhostApproval Vulnerability Affects Amazon Q, Claude Code, Cursor, and Other AI Agents

The full story

Extracted Entities

Companies (1)

Platforms (3)

Tools (2)

Vulnerabilities (1)