SymJack: the approval prompt is lying to you. A symlink-hijack RCE in five AI coding agents
A prompt injection and symlink attack tricks AI coding assistants into RCE through a disguised file copy. We tested five major tools. All were vulnerable. How it works and how to defend.