GhostApproval Flaw Affects Major AI Coding Assistants, Allowing File Write Outside Sandbox

A newly identified vulnerability pattern, 'GhostApproval,' impacts six prominent AI coding assistants, including Amazon Q Developer and Google Antigravity. The flaw exploits a combination of a Unix attack primitive and an AI-specific twist, enabling malicious repositories to trick agents into writing files outside their designated workspace sandbox, potentially leading to remote code execution.