// Google CloudMEDIUM
GhostApproval, a vulnerability pattern disclosed July 9, 2026, affects Google Antigravity and other AI coding assistants. It exploits symlink following combined with UI misrepresentation to bypass file operation confirmations, enabling arbitrary file writes and remote code execution. Google has implemented fixes and is evaluating formal CVE assignment.
- GhostApproval Attack Impacts Amazon Q, Claude Code, Cursor, Goog(opens in a new tab)
- New GhostApproval Vulnerability Affects Amazon Q, Claude Code, C(opens in a new tab)
// Get alerts for Google Cloud