Executive Summary
Wiz reported GhostApproval, an attack method involving AI coding assistants and developer machines. Organizations using AI coding tools should assess agent permissions and approval controls.
What Happened
Wiz has disclosed the details of a new AI coding assistant attack method it has dubbed GhostApproval. The post AI Coding Tools Tricked Into Hacking Developer Machine via Decades-Old Technique appeared first on SecurityWeek .
Vulnerability / Attack Technique
GhostApproval attack method
Technical Mechanism
The summary states that GhostApproval targets AI coding assistants and causes them to hack a developer machine. It does not provide further technical details about the attack mechanism.
AI Security Category
AI-assisted attack
Part of the AI-Assisted Attacks topic.
RealGround Analysis
This matters because AI coding assistants may be able to perform actions on developer machines, creating a security boundary between AI-generated activity and local systems. Teams running AI agents should evaluate permission scopes, approval workflows, and agent behavior through targeted security testing.
Recommended Controls
- Require explicit, narrowly scoped approval for AI coding assistants before executing actions on developer machines
- Limit coding-agent permissions and isolate agent execution from sensitive developer environments
- Log and monitor agent-initiated commands, file access, and system changes
- Conduct AI red teaming focused on deceptive approval workflows and unauthorized local actions
Related RealGround Service
Secure AI Agent Build · or start with the free AI Agent Security Scanner.
Sources
securityweek.com: https://www.securityweek.com/ai-coding-tools-tricked-into-hacking-developer-machine-via-decades-old-technique/
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.