Wiz researchers disclose GhostApproval vulnerability in six AI coding assistants

Wiz security researchers disclosed GhostApproval, a vulnerability affecting Amazon Q Developer and five other major AI coding assistants that allows attackers to bypass human-in-the-loop approval by misleading humans in the approval workflow. The vulnerability demonstrates systematic security gaps in approval mechanisms across multiple coding agent platforms.